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APPENDIX  A 

PERFORMANCE  OF  ATARS  AT  LONGER  RANGES 
FROM  THE  DABS  SENSOR 

D.  G.  Hamrick 


A-1.  IN TROD OCT ION 

The  perforaance  of  Autoaated  Traffic  Advisory  and 
Resolution  Service  (A1ABS)  is  known  to  degrade 
noticeably  with  increased  ranges  of  the  aircraft 
fron  the  Discrete  Address  Beacon  Systen  (DABS) 
sensor.  No  previous  study  has  been  undertaken  to 
deternine  the  aaxiaua  useful  service  range  of 
ATARS.  Host  previous  studies  have  investigated 
ATARS  perforaance  at  ranges  less  than  50  nai.  It 
is  inportant  to  know  what  the  aaxiaua  service 
range  is  for  several  reasons.  First,  knowledge  of 
the  naxiaua  service  range  can  be  iaportant  in 
deteraining  how  aany  DABS/ATARS  sensors  to 
procure,  and  in  deciding  where  to  place  then. 
Second,  during  early  iapleaentation  soae  sensors 
will  be  isolated  without  neighboring  sensors. 

These  sensors  nust  terninate  ATARS  service  at  the 
naxiaua  service  range,  rather  than  at  a  boundary 
which  separates  their  own  service  area  fron  that 
of  another  sensor.  Hence,  an  in-depth  study  has 
been  nade  to  deternine  what  the  aaxiaua  service 
range  is,  what  aodif ications  and/or  additions  will 
iaprove  perforaance  at  ranges  greater  than  50  nai, 
and  of  these,  which  one  (s)  are  preferred. 

The  approach  used  in  this  study  was  the  following. 
A  Honte  Carlo  siaulation  was  used  to  evaluate  the 
perforaance  of  the  current  ATARS  algoritha. 
Encounters  involving  aircraft  with  several 
different  speeds  were  siaulated  at  various  ranges 
froa  30  nai  to  100  nai.  Encounters  were  created 
which  would  show  both  the  resolution  failure  and 
the  false  alara  perforaance  of  ATABS.  The  results 
of  these  siaulations  were  then  evaluated. 

It  was  found  that  ATARS  was  able  to  provide 
adeguate  protection  for  encounters  involving  high 
perforaance  aircraft  at  all  ranges  out  to  100  nai. 
ATARS  resolves  these  conflicts  using  only  vertical 
aaneuvers.  However,  it  was  observed  that  the 
nuaber  of  false  alaras  increased  significantly 
with  range  for  these  encounters.  For  encounters 
involving  low  perforaance  aircraft,  the  resolution 
perforaance  deteriorated  noticeably  with  range. 
ATARS  resolves  these  encounters  with  horizontal 


A- 1-1 


maneuvers.  At  long  range,  a  few  resolutions 
resulting  froa  A1AFS  false  alaras  caused  hazardous 
near  misses,  even  though  the  aircraft  would  have 
been  safe  without  any  resolution  aaneuvers. 

Having  identified  this  area  of  poor  resolution 
perforaance  in  the  ATABS  logic,  the  study 
proceeded  to  address  the  following  problea  "lhat 
oust  be  done  to  reduce  the  resolution  failures  (to 
zero,  if  possible)  while  ainiaizing  the  conseguent 
increase  in  false  alaras."  The  encounters  which 
resulted  in  unsatisfactory  resolution  were 
analyzed  in  detail.  A  nuaber  of  factors  which 
seemed  to  contribute  to  poor  resolution 
perforaance  were  identified.  Several  approaches 
were  considered  for  improving  the  resolution 
perforaance.  The  approaches  were  of  two  types  - 
changing  existing  ATABS  parameters,  and  modifying 
existing  ATABS  logic.  Each  approach  to  iaproving 
perforaance  was  incorporated  into  the  simulation 
and  exercised  using  the  sane  set  of  encounters 
involving  low  perforaance  aircraft  as  was  used  to 
exercise  the  current  ATABS.  The  various 
approaches  were  compared,  taking  into  account  all 
aspects  of  perforaance.  A  single  approach  was 
selected  and  recommended  for  incorporation  into 
the  current  ATABS  algorithm. 

The  maximum  service  range  of  ATABS  is  dependent 
upon  the  accuracy  of  the  DABS  sensor.  If  the 
azimuth  accuracy  provided  by  DABS  were  to  improve 
twofold,  the  aaxiaua  service  range  of  ATABS  would 
be  doubled.  Thus,  it  is  important  to  verify  the 
DABS  sensor  accuracy  figures  used  in  the 
simulation.  A  brief  comparison  was  made  between 
the  radar  data  generated  by  the  simulation  and 
some  real  world  data  obtained  recently  froa  field 
tests. 
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A  Monte  Carlo  siaulation  was  used  to  evaluate 
ATARS  perforaance.  Many  encounters  were 
siaulated,  using  different  geoaetries, 
surveillance  errors,  pilot  delays,  and  escape 
rates.  This  section  describes  the  Monte  Carlo 
siaulation  and  the  encounters  that  were  siaulated. 

A-2. 1  The  Eleven  Roainal  Scenarios 

Two  types  of  encounters  sere  siaulated — near 
collision  encounters  and  safe  passage  encounters. 
The  foraer  were  intended  to  show  the  ATARS 
collision  prevention  perforaance  and  were  expected 
to  reveal  any  late  detection  or  iaproper 
resolution  probleas.  The  safe  passage  encounters 
were  ones  in  which  the  aircraft  at  closest 
approach  were  separated  horizontally  by 
approxiaately  4500  feet.  These  were  intended  to 
show  the  false  alara  perforaance  of  ATARS.  Eleven 
different  noainal  scenarios  were  siaulated.  They 
are  shown  in  Figure  A-2-1.  Scenarios  A  through  E 
are  the  collision  scenarios.  Scenarios  F  through 
K  are  the  safe  passage  scenarios. 

The  noainal  collision  scenarios  are  true  collision 
trajectories.  However,  the  siaulation  generates  a 
nunber  of  individual  encounters  froa  each  noainal 
scenario.  In  each  encounter,  the  initial 
positions  and  velocities  are  randoaly  selected  by 
adding  snail  perturbations  to  the  noainal 
conditions.  The  result  is  a  nuaber  of  unigue 
encounters,  each  of  which  has  nearly  a  collision 
geonetry . 

In  the  sane  way,  each  of  the  safe  passage 
scenarios  (except  for  Scenario  K)  has  a  noainal 
closest  approach  of  4500  feet.  The  siaulation 
applies  perturbations  to  generate  a  nuaber  of 
individual  encounters  which  have  separations  at 
closest  approach  in  the  range  of  3000  to  6000 
feet . 

Scenario  K  is  a  scenario  that  was  observed  during 
the  ATARS  flight  tests.  The  two  aircraft  are 
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FIGURE  A-2-1 

THE  ELEVEN  SIMULATION  SCENARIOS 


initially  on  a  collision  coarse  with  their  tracks 
crossing  at  90  degrees.  Just  prior  to  the  time 
that  ATARS  selects  connands,  one  pilot  begins  a 
turn  behind  the  other,  a  aaneuver  which  could 
satisfactorily  resolve  the  encounter.  However, 
due  to  tracking  lag,  ATARS  is  sowetiaes  not  aware 
of  the  existing  turn  and  it  issues  a  turn  advisory 
in  the  opposite  direction.  By  the  tiae  the  pilot 
can  respond  to  the  ATARS  advisory,  its  beading  is 
guite  different  froa  that  used  for  the  calculation 
of  the  advisories.  If  the  pilot  does  then  follow 
the  ATARS  advisory,  he  can  be  turned  back  to  a 
near  collision  course.  This  scenario  is  included 
here  because  it  provides  a  known  challenge  to 
ATARS  and  could  presuaably  highlight  effects 
caused  by  reduced  surveillance  accuracy  at  longer 
ranges.  Several  approaches  are  presently  being 
investigated  in  the  current  ATARS  developnent 
program  to  provide  relief  from  this  problem. 

Both  aircraft  are  initially  in  level  flight  in  all 
encounters.  The  aircraft  only  depart  from  level 
flight  if  they  receive  vertical  resolution 
advisories.  The  true  initial  altitude  separation 
between  the  aircraft  for  each  encounter  is  picked 
randomly  from  the  range  0  to  200  feet.  In  all 
scenarios,  both  aircraft  have  the  same  nominal 
speed.  Three  sets  of  speeds  were  simulated  -  100 
knots,  250  knots,  and  500  knots.  Other  scenarios 
with  mixed  speeds  were  not  simulated,  because 
there  was  not  sufficient  time  to  do  so. 

A- 2. 2 _ Simulation  Parameters 

Each  nominal  encounter  was  repeated  20  times,  with 
different  error  samples  from  the  same  statistical 
distribution  being  used  for  each  repetition.  This 
gave  a  set  of  220  true  encounters  (11  scenarios  X 
20  repetitions).  Table  A-2-1  presents  the  values 
used  for  the  significant  simulation  parameters  and 
assumptions.  The  dimensions  for  the  three  turning 
encounters,  E,  J,  and  K,  vary  with  different 
speeds.  Table  A-2-2  gives  the  necessary  values 
for  100,  250,  and  500  knot  aircraft. 
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SIMULATION  PARAMETERS  AND  ASSUMPTIONS 


Radar  Azimuth  Error 

Standard  Deviation 

0.1  deg. 

Turn  Rate  for  Escape 
by  100  Knots  Aircraft 

6  deg. /sec 

Clim?,  Rate  for  Escape 
by  250  Knots  Aircraft 

1800  ft. /min. 

Descent  Rate  for  Escape 
by  250  Knots  Aircraft 

1800  ft. /min. 

Climb  Rate  for  Escape 
by  500  Knots  Aircraft 

1000  ft. /min. 

Descent  Rate  for  Escape 
by  500  Knots  Aircraft 

1500  ft. /min. 

Acceleration  for  Escape 
by  all  Aircraft 

7.5  ft. /sec. ^ 

Pilot  Delay 

Uniform  Distribution 
from  5.5  to  8.5  Seconds 

Probability  of  DABS  Report 
on  One  Scan 

0.99 

Radar  Scan  Period 

4  Seconds 

Both  Aircraft  Equipped 

Both  Aircraft  Respond 

ATARS  VFR/VFR  Logic  is  Used 
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Several  Calcomp  plots  are  presented  throughout 
this  appendix  to  give  a  visual  iaage  to  soae  of 
the  encounters  aentioned  in  the  text.  Figure 
A- 2-2  is  an  exaaple.  It  is  presented  here  so  that 
the  symbolism  nay  be  explained.  The  legend  in  the 
upper  right  corner  shows  the  coding  used  to 
represent  the  various  types  of  ATABS  Messages. 

The  scale  is  indicated  on  the  plot  by  a  line  of 
length  one  nautical  nile.  Not  all  plots  have  the 
sane  scale.  The  true  position  of  an  aircraft  at 
each  scan  is  given  by  the  first  of  three  saall 
dots.  The  true  heading  is  indicated  by  the 
alignment  of  the  three  dots.  The  true  speed  is 
indicated  by  the  spacing  between  the  three  dots. 
The  location  of  the  raw  radar  report  for  each 
aircraft  for  each  scan  is  represented  by  a  small 
equilateral  triangle.  The  aircraft  are  identified 
by  the  AC1  or  AC2  symbol  attached  to  the  first 
radar  report  by  a  leader  line. 

The  current  ATABS  tracker  operates  on  the  raw 
radar  reports  and  produces  tracked  positions  and 
velocities  for  use  by  the  ATABS  algorithms.  The 
tracked  position  is  represented  by  one  of  the 
ATABS  message  symbols.  The  tracked  heading  and 
speed  is  indicated  by  the  velocity  vector 
emanating  from  the  ATABS  message  symbol.  Finally, 
every  fourth  scan  is  labeled  with  the  scan  number 
and  the  altitude  in  hundreds  of  feet.  The  scan 
numbers  can  be  used  to  locate  the  positions  of  the 
two  aircraft  at  the  same  time. 
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Huch  of  the  analysis  presented  in  this  appendix 
deals  with  details  of  the  ATABS  algorithns.  A 
faniliarity  with  the  fondanental  features  of  ATABS 
is  necessary  for  an  understanding  of  the 
discussion  that  follows.  This  section  provides  a 
sunnary  of  the  logic  and  is  intended  to  provide 
that  faniliarity.  The  ATABS  algorithns  that  were 
sinulated  in  this  study  are  exactly  those  found  in 
Reference  1. 

A- 3. 1 _ ATABS  Detection  logic 

The  vertical  detection  logic  is  not  naterial  to 
the  current  study.  The  horizontal  detection  logic 
uses  a  variable  called  horizontal  tau.  The 
eguation  for  conputing  horizontal  tau  is  not 
inportant  at  the  nonent.  Horizontal  tau  (or 
sinply  tau)  is  an  approxination  to  the  tine 
renaining  before  two  aircraft  will  reach  their 
closest  horizontal  separation,  if  they  continue  in 
linear  flight.  The  horizontal  criterion  for 
issuing  an  ATABS  resolution  advisory  is  net  on  one 
particular  radar  scan  if  tau  is  less  than  a 
threshold,  TCHD .  TCHD  is  a  threshold  which  takes 
different  values  depending  upon  the  attributes  of 
the  encounter  (flight  rules,  ATABS  eguipage,  and 
speeds  of  the  aircraft).  For  all  encounters 
sinulated  in  this  appendix,  both  aircraft  are 
assuned  to  be  flying  according  to  Visual  Flight 
Buies  (VFB)  and  both  are  assuned  to  be  equipped 
with  ATABS.  This  was  done  as  an  expedient.  Other 
types  of  encounters  should  be  investigated  in  the 
future.  The  value  taken  by  TCHD  for  these  types 
of  encounters  in  the  current  ATABS  algorithns  is 
given  by  the  paraneter,  TL2.  It  has  a  noninal 
value  cf  32  seconds.  This  paraneter  is 
subsequently  referred  to  as  the  look-ahead  tine. 

An  ATABS  advisory  is  nornally  not  issued  until  the 
criterion  for  an  advisory  has  been  net  on  two  of 
three  successive  scans.  However,  if  tau  is  less 
than  25  seconds  on  the  first  scan  at  which  the 
criterion  is  net,  advisories  will  be  issued 
in nediately. 
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No  special  logic  is  involved  to  determine  when  to 
terminate  the  advisories.  1T1BS  continues  to 
display  the  advisories  for  as  long  as  the 
detection  criterion  is  set.  There  is  a 
restriction,  however,  that  reguires  that  positive 
advisories  resain  displayed  for  a  sininus  period 
of  tine,  once  issued.  In  the  current  ATABS ,  this 
ninimun  duration  is  two  scans.  The  ATABS 
parameter  which  implesents  this  feature  is  TSCND. 

hzls.2 _ A  2  A  B  s_Co  mja  n  d_  Selection_Logic 

Once  the  decision  to  issue  resolution  advisories 
has  been  made,  ATAFS  determines  whether  they 
should  be  issued  in  the  horizontal  or  vertical 
dimension.  In  the  case  where  both  aircraft  are  in 
level  flight,  both  are  VFB,  and  both  are  eguipped 
with  ATABS,  resolution  is  vertical  if  the  vertical 
separation  based  upon  tracked  altitudes  is  greater 
than  370  feet,  or  if  at  least  one  of  the  aircraft 
has  a  tracked  speed  greater  than  150  knots. 
Resolution  is  horizontal,  otherwise. 

When  the  vertical  dimension  has  been  selected  for 
resolution,  the  advisories  are  positive  (Climb  or 
Descend)  if  the  vertical  separation  based  upon 
tracked  altitudes  is  greater  than  470  feet.  The 
advisories  are  negative  (Don't  Climb  or  Don't 
Descend) ,  otherwise. 

When  the  horizontal  dimension  has  been  selected, 
the  advisories  are  positive  (Turn  left  or  Turn 
Sight)  if  the  horizontal  miss  distance  is  less 
than  0.5  nmi.  (This  test  is  actually  performed  by 
comparing  the  sguare  of  horizontal  miss  distance 
with  the  threshold,  HDTHSQ.)  Horizontal  miss 
distance  is  the  closest  separation  that  two 
aircraft  would  have  in  the  future  if  they  were  to 
proceed  from  their  current  positions  with  their 
current  velocities.  Negative  horizontal 
advisories  would  be  issued  if  the  horizontal  miss 
distance  is  greater  than  0.5  nmi. 

Once  the  resolution  dimension  has  been  selected, 
all  advisories  continue  to  be  issued  in  that  sane 
dimension  for  as  long  as  the  detection  criterion 
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continues  to  be  satisfied.  Transitions  fron  one 
dimension  to  another  are  not  permitted.  However, 
transitions  fron  positive  to  negative  advisories 
or  from  negative  to  positive  advisories,  within 
the  saae  diaension  are  peraitted.  These  take 
place  whenever  the  horizontal  aiss  distance 
crosses  the  0.5  nai  threshold  or  the  vertical 
separation  crosses  the  threshold  of  470  feet. 
Transitions  are  liaited  only  by  the  reguireaent 
that  positive  advisories  reaain  displayed  for  a 
mini mu ■  number  of  scans.  Otherwise,  they  can  take 
effect  iaaediately. 

When  horizontal  resolution  advisories  (positive  or 
negative)  are  reguired,  the  turn  directions  are 
determined  by  an  algorithm  which  selects  one  of 
the  following  three  rules  depending  upon  the 
geometry  of  the  encounter: 

1)  Turn  each  aircraft  away  from  the  present 
position  of  the  other  aircraft. 

2)  Turn  each  aircraft  in  the  direction  that 
will  cause  the  horizontal  miss  distance  to 
increase. 

3)  Turn  the  aircraft  which  will  pass  behind 
the  other  so  as  to  cause  it  to  pass  further 
behind.  Turn  the  other  aircraft  in  the 
opposite  direction. 

In  the  case  of  horizontal  negative  advisories,  the 
same  algorithm  that  would  be  used  to  select 
horizontal  positive  advisories  is  executed.  The 
turn  advisories  that  result  are  then  converted  to 
the  appropriate  don*t  turn  advisories  (i.e.,  a 
Turn  Left  from  the  algorithm  becomes  a  Don't  Turn 
Bight  advisory) . 

An  additional  feature  of  the  logic  is  that 
whenever  an  advisory  transitions  fron  a  positive 
to  a  negative  or  vice  versa,  the  advisories  will 
be  recomputed.  That  is,  the  algorithm  to  select 
the  directions  of  turn  will  be  executed  again  and 
the  new  results  issued  as  the  new  advisories. 
However,  as  long  as  a  transition  does  not  .occur. 
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the  saae  advisories  will  be  issued  fros  scan  to 
scan.  As  a  result  of  this  recosputation  logic*  a 
pilot  could  receive  a  Torn  Left  advisory  followed 
by  a  Don't  Turn  Left  advisory.  Later  in  this 
appendix*  such  a  change  is  referred  to  as  a  change 
in  "sense"  of  the  advisory. 
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Table  1-4-1  presents  a  sunnary  of  results  for  the 
siaulaticn  of  1T1PS  perfornance  as  a  function  of 
range,  in  explanation  of  the  presentation  is 
needed  before  the  results  are  discussed. 

1-4. 1 _ Sunnary  Table  Explanation 

A  collision  encounter  in  which  111BS  issued 
positive  advisories  was  counted  as  a  failure  if 
the  two  aircraft,  while  responding  to  the 
advisories,  reached  a  point  where  they 
simultaneously  had  less  than  200  feet  vertical 
separation  and  less  than  1000  feet  horizontal 
separation.  In  Table  1-4-1,  failures  are 
tabulated  separately  for  the  four  straight 
scenarios  (80  encounters)  and  the  one  turning 
scenario  (20  encounters) . 

A  category  of  failures  called  "failures  caused  by 
false  alarns"  is  also  included.  A  failure  in  this 
category  comes  about  when  the  aircraft  response  to 
advisories  in  a  safe  passage  encounter  results  in 
less  than  200  feet  vertical  and  1000  feet 
horizontal  separation.  (These  encounters  would 
have  been  safe  without  resolution  advisories. 
Hence,  the  failure  is  considered  to  be  caused  by 
the  false  alarm.) 

An  entry  in  the  last  category,  entitled  "false 
alarms",  is  generated  when  a  positive  advisory  is 
issued  for  one  of  the  safe  passage  encounters. 

The  number  of  false  alarns,  produced  by  one 
modification  of  ATABS  relative  to  another,  is  an 
important  factor  in  evaluating  modification  to 
ATARS.  The  absolute  number  of  false  alarms  is  a 
function  of  the  nominal  safe  passage  distance 
simulated.  For  certain  types  of  encounters  (e.g., 
high  speed  encounters  at  high  altitude) ,  an 
advisory  that  is  issued  when  the  minimum 
horizontal  separation  is  450  feet  may  not  be 
considered  a  false  alarm.  Hence,  the  number  of 
false  alarms  is  not  intended  to  be  meaningful  in 
an  absolute  sense. 
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For  the  encounters  with  two  100  knot  aircraft, 
ATARS  uses  horizontal  resolution  Maneuvers.  In 
this  case,  the  degradation  of  surveillance 
accuracy  with  range  could  be  expected  to  have  an 
inpact  on  the  duration  of  resolution  advisories. 
The  average  duration  of  the  turn  advisories  is 
shown  in  Table  A-4-1  for  the  100  knots 
sinulations. 

A-4.2  Results  of  the  Simulation 

Table  A-4-1  shows  that  the  most  significant  effect 
of  degraded  surveillance  at  longer  ranges  is  an 
increase  in  the  nunber  of  false  alaras.  This 
effect  is  expected  and  is  inevitable.  There  is 
nothing  that  can  be  done  about  the  increase  in 
false  alarns  at  longer  ranges  without  conpronising 
safety.  Thus,  the  thrust  of  this  study  has  been 
to  improve  late  detection  performance  while 
minimizing  the  associated  increase  in  false 
alaras. 

There  is  little  impact  of  degraded  surveillance  at 
longer  ranges  on  late  detection.  The  most  severe 
impact  of  operating  at  longer  ranges  occurs  with 
the  100  knot  aircraft  which  receive  horizontal 
advisories.  For  the  faster  aircraft,  no 
significant  safety  degradation  is  noted.  Host  of 
the  caused  failures,  which  occur  in  the  100  knot 
simulations,  come  from  scenario  K ;  but  two  of  then 
come  from  other  scenarios  in  the  simulations  at 
100  nautical  miles.  It  is  noted  that  no  caused 
failures  occur  when  the  resolution  is  with 
vertical  maneuvers. 

The  failures  shown  in  the  turning  cases  do  not 
necessarily  represent  failures  of  the  ATARS 
system.  ATARS  Proximity  Warning  Indicator  (PWI) 
advisories  are  intended  to  prevent  turns  of  the 
sort  used  in  these  simulations.  However,  turning 
encounters  such  as  this  could  still  occur  in 
unusual  situations  (perhaps  because  the  pilot  of 
the  turning  aircraft  has  visually  identified  the 
wrong  threat  aircraft).  Table  A-4-1  shows  that 
failures  occur  in  turning  encounters  even  at  30 
nmi.  Improving  ATARS  performance  in  turning 
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encounters  (at  all  ranges)  is  an  important  task 
that  should  receive  priority  in  the  future 
developeent  of  ilhBS. 

For  the  100  knot  sinulations,  the  average  duration 
of  the  turn  advisories  is  shown,  lo  significant 
effect  is  shown  as  a  function  of  range. 
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A-5.  APPROACHES  TO  IHPBOVI1»G  PBBEOBBA1CE  AT  1QH6EB 
RAHGES 

Two  types  of  modif ications  to  the  ATABS  logic  were 
considered  to  improve  the  resolution  failure 
performance  for  100  knot  encounters.  These  were 
changes  to  ATABS  parameters  and  changes  to  the 
ATABS  logic. 

A-5. 1  ATABS  Parameter  Changes 

The  first  and  simplest  modifications  to  the 
current  ATABS  were  made  to  the  ATABS  parameters. 
The  first  approach  to  improvement  was  to  increase 
the  protection  volume  parameters.  It  seemed 
logical  that  larger  protection  volumes  would  be 
required  to  account  for  the  larger  surveillance 
uncertainty  at  greater  ranges.  The  miss  distance 
threshold,  look-ahead  time,  and  minimum  duration 
of  positive  commands  were  all  increased  in  several 
different  combinations. 

A-5. 1.  1  Miss  Distance  Threshold _ (HD) 

The  current  ATABS  uses  a  horizontal  miss  distance 
threshold,  HD,  of  0.5  nmi.  (The  actual  logic  uses 
the  square  of  this  threshold,  HDTBSQ.)  That  is, 
if  ATABS,  based  on  its  tracked  data,  observes  a 
horizontal  miss  distance  less  than  0.5  nmi,  a 
positive  advisory  will  be  called  for.  Increasing 
the  miss  distance  threshold  would  increase  the 
horizontal  protection  volume  which  should  provide 
increased  protection  in  turning  encounters. 

In  reviewing  the  details  of  the  failure  encounters 
from  the  simulations  with  the  current  ATABS,  it 
was  noticed  that  there  were  many  transitions  of 
advisories  (negative-to-positive  and  positive-to- 
negative  transitions)  for  the  100  knot  simulation 
at  100  nautical  miles.  In  several  cases  this  led 
to  reversals  in  the  "sense"  of  the  advisories. 
Thus,  the  miss  distance  threshold  was  increased  in 
an  attenpt  to  reduce  the  number  of  undesirable 
transitions,  due  only  to  noise. 

Table  A-5-1  shows  the  effect  of  setting  the  miss 
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distance  threshold  to  1  mi.  Colum  1  presents 
results  with  the  current  ATARS  parameters.  Coluan 
4  shows  the  results  with  HD  =  1  nai.  The  nuaber 
of  failures  was  slightly  reduced;  however,  there 
was  an  increase  in  the  nuaber  of  false  alaras. 

This  effect  would  be  expected  since  the  horizontal 
separation  at  closest  approach  for  these 
encounters  ranged  froa  3000  to  6000  feet,  is  will 
be  shown  later,  this  change  proved  to  be  one  of 
the  least  effective  overall. 

A- 5.  1.2 _ Look-Ahead  Tine  (TL21 

The  look-ahead  time  determines  how  far  in  advance 
of  closest  approach  ATARS  issues  its  advisories. 
When  a  large  look-ahead  tine  is  used,  a  positive 
advisory  might  be  generated,  even  though  the 
aircraft  eight  turn  in  the  near  future  and  no 
longer  be  in  danger  of  a  collision.  Therefore, 
the  current  look-ahead  tiae  is  set  to  a  relatively 
short  32  seconds.  It  was  felt  that  increasing 
this  to  40  seconds  would  allow  extra  tiae  for  the 
resolution  to  overcome  the  effects  of  a  poor 
initial  choice  of  advisories.  Increasing  this 
threshold  will  also  provide  additional  escape  time 
in  cases  where  the  surveillance  errors  had 
previously  provided  insufficient  time  for 
resolution.  The  results  with  this  change  are 
summarized  in  Table  A-5-1,  Column  3.  This  change 
had  a  significant  effect  on  reducing  the  number  of 
failures.  The  reduction  in  the  number  of  caused 
failures  is  quite  significant.  Except  for  the  one 
caused  failure  from  scenario  K,  the  resolution 
performance  is  as  good  as  that  at  30  nni. 

Because  a  large  improvement  in  resolution 
performance  was  noticed.  Table  A-5-2  was  included 
to  permit  a  detailed  comparison  between  the  use  of 
a  40  second  look-ahead  tine  and  the  current 
threshold  value.  The  columns  marked  inner,  middle 
and  outer  show  the  number  of  encounters  that  had  a 
separation  at  closest  approach  of  less  than  1G00 
feet  horizontal,  200  feet  vertical;  2000  feet 
horizontal,  and  350  feet  vertical;  3000  feet 
horizontal,  and  500  feet  vertical;  respectively. 

An  encounter  in  the  inner  box  would  not  count  in 
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the  middle  box,  etc.  A  decrease  in  the  number  of 
aircraft  pairs  falling  into  the  outer  two  boxes  is 
shown  in  the  case  of  the  increased  look-ahead 
tine.  This  neans  that  aore  of  the  encounters  were 
resolved  with  horizontal  separations  in  excess  of 
3000  feet.  While  the  longer  look-ahead  tine  was 
useful  in  avoiding  sone  previous  failures,  it 
provides  very  conservative  resolution  for  nany 
other  encounters.  This  conservative  resolution  is 
an  undesirable  attribute  for  VFB  flight  and  will 
tend  to  anplify  the  differences  between  the 
perception  of  threat  by  ATARS  and  by  the  pilots. 
Results  of  ATARS  flight  tests  (see  Reference  2) , 
in  which  subject  pilots  were  provided  a  traffic 
advisory  service  only  and  were  pernitted  to 
provide  their  own  separation,  showed  that  one- 
third  of  the  subject  pilots  were  willing  to  accept 
nininun  separations  of  less  than  200  feet  vertical 
and  2000  feet  horizontal. 

A- 5. 1 . 3 _ Minimum  Duration  of  Positive  Advisories 

(TSCHD) 

The  last  ATARS  parameter  modified  was  the  minimum 
duration  of  positive  advisories,  TSCHD.  In  the 
current  ATARS  logic,  this  parameter  is  set  to 
seven  seconds.  This  causes  a  positive  advisory  to 
be  displayed  for  a  minimum  of  two  scans,  thereby 
avoiding  rapid  transitions  from  positive  to 
negative  advisories  due  to  noise.  As  stated 
before,  a  number  of  transitions  were  noted.  It 
was  thought  that  requiring  the  same  positive 
advisories  to  remain  displayed  for  a  longer  period 
would  reduce  the  liklihood  of  positive-negative 
transitions  and  the  resultant  recomputation  of 
commands.  This  recomputation  sometimes  leads  to  a 
reversal  of  the  "sense"  of  advisory  and  to 
ineffective  resolution.  A  new  value  of  15  seconds 
was  tried  for  TSCHD.  This  requires  that  positive 
advisories  remain  displayed  for  four  scans  without 
change. 

There  was  no  impact  shown  by  this  change  on  the 
normal  failures,  but  some  improvement  in  caused 
failures  resulted,  as  can  be  seen  in  Table  A-5-1, 
Column  2. 
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Increases  iB  the  aiss  distance  threshold  and  look- 
ahead  tine  were  applied  simultaneously  in  an 
effort  to  eliminate  the  one  caused  failure  that 
regained  when  the  look-ahead  tiie  alone  was 
increased.  Results  are  shown  in  Table  A-5-1, 
Coluan  5.  The  caused  failure  occurring  in 
scenario  K  was  eliainated  but  another  caused 
failure  was  introduced  in  scenario  J.  This 
approach  was  not  considered  further. 

A- 5. 2 _ ATARS  Logic  Hodif ications 

The  second  major  approach  to  improving  resolution 
performance  at  long  ranges  was  to  modify  the 
existing  ATARS  logic.  This  section  discusses  the 
effect  of  the  aodif ications  that  were  studied. 

A- 5. 2. 1 _ Exhaustive  Search  Algorithm  for 

Advisory  Selection 

Currently,  ATARS  utilizes  a  set  of  three  rules  to 
determine  the  best  horizontal  advisories  for  a 
given  situation.  It  was  postulated  that  there 
might  exist  a  better  choice  of  turn  direction  in 
some  cases.  Hence,  the  current  logic  was  replaced 
by  an  exhaustive  search  algorithm  which  looks  at 
all  possible  horizontal  turn  combinations  for  two 
aircraft.  Because  there  are  only  nine  possible 
combinations,  it  is  feasible  to  compute  the 
expected  separation  that  would  result  from  each 
one. 

The  exhaustive  search  algorithm  assumes  that  each 
aircraft,  after  a  nominal  delay,  turns  through  a 
fixed  heading  change  in  the  indicated  direction  at 
a  nominal  turn  rate.  It  computes  the  minimum 
separation  that  would  result  if  both  aircraft  were 
to  follow  such  maneuvers.  The  process  is  repeated 
for  all  nine  combinations  of  maneuvers.  The 
results  are  compared  to  determine  the  combination 
that  provides  the  largest  minimum  separation.  For 
this  study  of  190  knot  aircraft  at  100  nautical 
miles,  the  turn  angle  was  60  degrees  and  the  turn 
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rate  was  three  degrees  per  second.  The  exhaustive 
search  approach  was  taken  to  see  if  such  a  aetbod 
for  deteraining  the  turn  directions  sight  have 
less  sensitivity  to  surveillance  errors.  As  Table 
A- 5- 3  shows,  while  scae  iaproveaent  was  aade  in 
the  nuaber  of  failures  caused  by  false  alaras,  not 
all  such  failures  were  eliainated.  Evidently,  the 
problems  with  the  current  ATAFS  are  not  caused 
solely  by  poor  initial  choices  of  maneuvers. 

A- 5. 2. 2 _ The  Ose  of  Compatible  Negative  Advisories 

As  mentioned  earlier,  a  number  of  transitions  were 
noted  with  the  current  ATARS  algorithm.  A  logic 
modification  that  was  implemented  in  an  attempt  to 
alleviate  this  problem  was  the  use  of  a  compatible 
negative  feature  in  the  transition  logic.  This 
logic  would  allow  transitions  from  positive  to 
negative  and  negative  to  positive  advisories,  but 
would  ensure  that  the  "sense"  of  the  command 
remained  the  sane.  For  example,  a  "turn  left"  and 
a  "don't  turn  right"  would  have  the  sane  sense 
while  a  "turn  left"  and  "don't  turn  left"  would 
not. 

A  note  should  be  made  here  concerning  the  tiae 
delays  in  the  ATAFS  system.  There  is  inherently  a 
one  scan  delay  between  the  tine  the  last  radar 
report  is  received  and  the  tiae  an  advisory 
reaches  the  aircraft,  due  to  the  fact  that  the 
radar  beam  leaves  the  aircraft  before  an  advisory 
can  be  determined.  Hence,  the  systea  must  wait 
for  the  next  scan  to  deliver  the  advisory.  There 
is  also  a  pilot  response  delay,  normally  between 
five  and  ten  seconds.  Turning  also  takes  tiae;  at 
six  degrees  per  second,  a  24  degree  turn  could  be 
aade  in  four  seconds,  for  exaaple.  Finally,  there 
is  a  tracker  lag  of  about  three  scans.  Hhen  all 
these  factors  are  added  together  it  becoaes  clear 
that  one  cannot  expect  to  see  any  feedback  from  an 
advisory  in  less  than  roughly  six  scans.  Table 
A- 5-4  summarizes  this.  The  coapatible  negative 
routine  was  iaplemented  in  an  effort  to  prevent 
changing  the  "sense"  of  advisories  before  the 
ATARS  algoritha  could  be  expected  to  see  the 
results  of  a  positive  turn  advisory. 
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TABLE  A-5-4 


DELAY  IN  OBSERVING  THE  EFFECT  OF  A  POSITIVE  ADVISORY 


TYPE  OF  DELAY 

SECONDS 

SCANS 

RADAR  CYCLE 

4 

1 

PILOT  RESPONSE 

5-10 

1-2 

ACTUAL  TURN 

4 

1 

TRACKER  LAG 

12 

3 

TOTAL 

m 
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The  compatible  negative  logic  will  issue  an 
advisory  that  is  coapatible  with  (i.e.,  has  the 
sawe  sense  as)  an  existing  one  whenever  a 
transition  occurs,  unless  a  specified  length  of 
tine  has  passed  since  the  last  positive  advisory 
was  issued.  A  transition  to  an  advisory  of 
opposite  sense  is  peraitted  19  seconds  (five 
scans)  after  a  positive  advisory  has  been  issued. 
This,  it  was  hoped,  would  reduce  the  nunber  of 
failures  caused  by  false  alarns;  however,  no 
inprovenent  was  noticed.  (See  Table  A-5-3.) 

A- 5. 2. 3 _ Turn-to-Headinq  Algorithn 

Another  approach  to  inproving  resolution 
performance  was  the  use  of  a  turn-to-heading 
routine.  A  turn-to-heading  advisory  would  have 
the  form  "Turn  Left  Heading  310".  This  approach 
was  tried  because  reversing  the  sense  of 
advisories  and  turning  advisories  on  and  off 
appeared  to  be  problems  with  the  current  ATAES 
logic.  Also  it  was  hoped  that  this  approach  would 
show  less  sensitivity  to  surveillance  errors. 

The  logic  is  basically  as  follows.  The  exhaustive 
search  algorithm  described  in  Section  A-5.2. 1  is 
used  to  predict  what  conbination  of  turns  will 
achieve  naximun  separation.  Rhen  the  detection 
logic  determines  that  an  advisory  should  be 
issued,  a  test  is  nade  to  see  if  a  turn-to-heading 
advisory  has  already  keen  issued.  If  one  has,  the 
logic  shuts  the  advisory  off  after  five  scans. 
However,  if  a  turn-to-heading  has  not  teen  issued, 
the  logic  now  issues  it. 

The  turn-to-heading  logic  is  actually  in  two 
parts;  one  for  horizontal  maneuvers  and  one  for 
vertical  naneuvers.  For  the  horizontal  case,  the 
current  tracked  heading  is  deternined  fron  the  x 
and  y  velocity  conponents.  If  the  exhaustive 
search  routine  deternined  that  a  Turn  Left 
advisory  was  reguired  for  one  of  the  aircraft,  the 
turn-to-heading  logic  would  add  a  specified  angle 
to  the  current  heading  (always  keeping  it  in  the 
range  between  0  and  360  degrees)  to  obtain  the 
final  desired  heading.  This  angle  is  the  sane  one 
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used  in  the  exhaustive  search  routine,  namely  60 
degrees.  If  a  Turn  Bight  advisory  is  reguired, 
the  specified  angle  is  subtracted  froa  the  current 
heading.  The  result  is  issued  as  an  advisory  for 
the  pilot  to  achieve  a  specific  heading.  The 
vertical  case  is  similar;  a  specified  nuaber  of 
feet  is  added  to  or  subtracted  froa  the  current 
altitude,  and  this  is  issued  as  an  advisory  to 
achieve  a  specific  altitude.  For  testing  purposes 
only,  the  number  of  feet  was  set  to  1000.  1 

nominal  figure  would  have  to  be  derived  if  this 
routine  were  to  be  implemented  operationally. 
Figure  A-5-1  presents  a  flow  chart  of  the  turn-to- 
heading  algoritha. 

Since  a  turn-to- heading  advisory  need  only  be 
displayed  long  enough  for  the  pilot  to  see  it  and 
respond,  the  display  tine  is  arbitrarily  set  to 
nineteen  seconds  (5  scans) .  This  can  easily  be 
changed  if  desired.  Cnee  a  heading  or  altitude 
has  been  deterained  and  issued,  it  is  never 
recomputed.  This  leans  there  can  be  no 
transitions  or  repeated  turning  on  and  off  of 
advisories.  Therefore,  the  nuaber  of  failures 
that  result  from  reversals  and  transitions  should 
decrease.  Figures  A-5-2  and  A-5-3  show  how  an 
encounter,  which  resulted  in  a  caused  failure  with 
the  current  ATABS  logic  and  paraaeters,  is 
satisfactorily  resolved  with  the  turn-to-heading 
routine. 

The  encounters  in  Figures  A-5-2  and  A-5-3  are 
identical  up  to  scan  nuaber  12,  at  which  tiae 
advisories  are  issued  by  the  two  logics.  The 
advisories  are  deterained  using  the  tracked 
position  and  velocities  froa  scan  nuaber  11.  The 
radar  failed  to  provide  a  radar  target  report  on 
scan  11  for  Aircraft  1  and  the  ATABS  tracker 
siaply  extrapolated  the  track  froa  the  conditions 
at  scan  10.  Because  of  the  aiss.  Aircraft  1  was 
also  unable  to  receive  the  flashing  FBI  aessage 
which  had  been  generated.  Nevertheless,  the 
tracked  position  and  velocity  of  Aircraft  1  did 
not  have  excessive  errors.  However,  Aircraft  2 
had  substantial  errors  in  tracked  position  and 
velocity  at  scan  11.  The  true  position  and 
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velocity  of  Aircraft  2  is  given  by  the  twelfth  set 
of  three  dots  froe  the  bottoa  of  the  figure  (the 
first  scan  is  scan  0).  It  is  clear  that  the 
tracked  heading  of  Aircraft  2  is  in  error  to  the 
left  and  the  tracked  speed  of  lircraft  2  is  less 
than  the  true  speed.  As  a  result,  the  current 
ATARS  algorithm  deternined  that  Turn  Left 
advisories  would  be  correct  for  both  aircraft. 

The  transition  and  start-stop  characteristics  of 
the  current  ATARS  are  evident  in  Figure  A-5-2. 

The  history  of  ATARS  aessages  for  the  two  aircraft 
is  shown  in  the  figure.  The  turn-to-heading 
routine,  even  though  working  with  the  sane 
surveillance  errors,  selected  a  60  degree  left 
turn  for  Aircraft  1,  and  a  60  degree  right  turn 
for  Aircraft  2.  This  provided  very  ample 
separation. 

Table  A-5-3  summarizes  the  results  of  the 
simulations  with  the  turn-to-heading  routine.  A 
slightly  greater  improvement  was  found  with  the 
turn-to-heading  than  with  the  exhaustive  search  or 
compatible  negative  algorithms. 

The  one  failure  for  the  turn-to-heading  algorithm 
in  the  straight  category  was  caused  by  scenario  B. 
This  failure  was  noticed  with  other  routines  that 
modified  the  ATARS  logic  but  was  not  noticed  in 
the  baseline  simulations.  The  reason  for  this 
additional  failure  was  not  readily  apparent.  In 
the  programming  of  the  turn-to-beading  algorithm, 
a  turn-to-heading  advisory  is  not  issued  when 
negative  advisories  would  normally  be  reguired. 
(This  was  an  expedient.  An  operational  turn-to- 
heading  algorithm  would  have  provision  for 
negative  advisories.)  Conseguently,  the 
simulation  takes  no  action  when  a  negative 
advisory  is  found  to  be  needed.  However,  in 
ignoring  the  negative  advisory,  a  random  number 
was  not  generated  in  the  turn-to-heading 
simulation  as  was  done  with  the  baseline  logic. 
This  brought  about  a  different  random  number 
seguence  from  this  point  to  the  end  of  the 
encounter,  which  caused  different  surveillance 
reports  to  be  generated  for  the  two  simulations. 
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ft  plot  shoving  the  scenario  B  failure  vith  the 
turn-to- heading  algorithm  is  presented  in  figure 
A- 5-4.  on  scan  11,  the  current  ITftBS  algoritha 
issued  a  negative  advisory.  The  simulation 
generated  a  randoa  pilot  delay  for  response  to  the 
negative  advisory  even  though  it  was  not  reguired 
in  this  case.  The  turn-to-heading  siaulation  did 
not  generate  this  randoa  nuaber.  Thus,  the 
seguences  of  randoa  numbers  were  different  for  the 
two  siaulations  froa  that  point  on.  The  turn-to- 
heading  siaulation  received  a  very  large 
surveillance  error  on  scan  12,  which  the  current 
ATftRS  logic  did  not  receive.  This  resulted  in 
different  resolution  maneuvers  and  different 
minimum  separations. 

In  Table  i-5-3,  the  number  of  false  alarms  is 
smaller  for  the  turn-to-heading  coluan  than  for 
the  current  ATftRS  coluan.  This  is  also  because  of 
different  random  nuaber  seguences  which  cause  the 
tracked  data  to  indicate  a  safe  passage  for  the 
turn-to-beading  siaulation  while  indicating  a 
collision  threat  in  the  other  cases.  This  is  an 
artifact  of  the  simulation  which  causes  the 
different  algorithms  to  experience  a  different  set 
of  surveillance  reports.  Ho  significance  should 
be  attached  to  the  differences  between  nuabers  of 
false  alarms  in  this  case. 

The  turn-to-heading  algoritha  was  not  as 
successful  as  expected.  One  additional  siaulation 
was  conducted  with  the  turn-to-heading  algoritha 
using  a  look-ahead  tiae  of  40  seconds,  to  see  if 
the  additional  alert  tiae  would  enable  the  turn- 
to-heading  algoritha  to  eliminate  all  caused 
failures.  The  results  are  shown  in  the  last 
coluan  of  Table  A-5-3.  Ejractly  the  sane  results 
as  for  the  current  ftTftRS  logic  with  a  look-ahead 
tiae  of  40  seconds  were  obtained.  Thus,  no  unigue 
advantage  of  the  turn-to-heading  approach  could  be 
shown  in  these  encounters  for  two  100  knot  ATARS- 
eguipped  aircraft. 
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Since  none  of  the  horizontal  parameter  or  logic 
■odifications  to  ATARS  was  able  to  eliminate  the 
phenonenon  of  caused  failures  for  100  knot 
aircraft  at  100  nmi,  the  use  of  vertical 
resolution  for  this  situation  was  considered.  A 
previous  study  has  been  conducted  to  deteraine 
when  horizontal  and  vertical  resolution  should  be 
used.  (Reference  3.)  This  study  showed  that  if 
both  aircraft  were  equipped  and  both  pilots 
responded  to  advisories,  either  horizontal  or 
vertical  aaneuvers  would  provide  equally  good 
resolution  performance.  However,  if  one  of  the 
pilots  does  not  respond  to  the  advisory  when  ATARS 
expects  that  it  will,  a  horizontal  aaneuver  for 
the  responding  aircraft  provides  better  resolution 
performance.  This  means  that  a  conscientious 
pilot  would  be  better  able  to  avei'f  a  collision 
with  horizontal  maneuvers,  if  the  other  pilot 
fails  to  respond  to  the  advisory.  It  was  on  the 
basis  of  this  advantage  that  the  use  of  horizontal 
maneuvers  was  recommended  for  encounters  in  which 
both  aircraft  have  speeds  less  than  150  knots. 

However,  the  study  in  Reference  3  did  not  analyze 
the  situation  at  ranges  greater  than  50  nmi  and 
did  not  consider  encounters  in  which  false  alarms 
could  lead  to  caused  failures.  Given  these 
circumstances,  the  investigation  of  the  use  of 
vertical  maneuvers  for  100  knot  aircraft  at  100 
nmi  appears  warranted. 

The  ATARS  algorithm  was  modified  to  use  vertical 
resolution  in  all  cases  in  which  positive 
advisories  were  reguired.  Nominal  escape  rates 
for  the  100  knot  aircraft  were  assumed  to  be  200 
feet  per  minute  or  400  feet  per  minute  for  climbs 
and  1000  feet  per  minute  for  descents.  At  100  nmi 
from  the  sensor,  the  floor  of  surveillance 
coverage  is  normally  about  6000  feet.  The  400 
feet  per  ninute  climb  rate  is  considered  typical 
of  the  capability  for  a  100  knot  aircraft  at  about 
this  altitude.  The  200  feet  per  ninute  climb  rate 
was  intended  to  be  a  conservative  figure  that 
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sight  apply  at  higher  altitudes.  The  escape 
acceleration  was  7.5  feet  per  second  sguared.  The 
results  of  the  simulations  using  vertical 
resolution  are  presented  in  Table  A-5-5.  The 
results  are  presented  separately  for  cliab  rates 
of  200  feet  per  ainute  and  400  feet  per  ainute. 
Since  several  failures  occurred  during  straight 
encounters  with  a  32  second  look-ahead  tine, 
simulations  with  vertical  resolution  and  a  40 
second  look-ahead  tine  were  also  conducted.  The 
resolution  perforaance  of  horizontal  aaneuvers  can 
be  compared  with  that  of  vertical  aaneuvers  for 
both  32  and  40  second  look-ahead  tiaes  in  Table 
A-  5-5. 

The  one  caused  failure  that  occurs  with  vertical 
advisories  and  a  look-ahead  tiae  of  32  seconds 
actually  was  not  a  failure.  Had  a  vertical 
maneuver  been  given,  no  failure  would  have 
occurred;  however,  a  negative  advisory  in  the 
horizontal  dimension  was  the  first  to  be  issued, 
trapping  the  resolution  in  that  dimension.  (The 
current  logic  reguires  that  once  the  dimension  of 
resolution  is  determined,  all  subseguent 
advisories  must  be  in  that  same  dimension.  This 
feature  is  being  changed  in  the  ongoing  ATABS 
development  program.  This  caused  failure  would 
not  occur  if  that  change  had  been  implemented. ) 

The  one  major  advantage  of  vertical  resolution 
over  horizontal,  then,  is  the  fact  that  no 
failures  were  caused  by  false  alarms.  The  number 
of  other  failures  is  comparable  to  that  found  in 
horizontal  resolution.  Thus,  vertical  resolution 
is  very  promising  at  100  nautical  miles, 
especially  if  an  increased  look-ahead  time  is  also 
used. 

A- 5. 3  Recommended  Hod if ication 

It  is  recommended  that  the  ATABS  logic  be  modified 
so  that  vertical  resolution  will  be  used  for 
aircraft  of  all  speeds  at  ranges  greater  than  50 
nmi,  whenever  both  aircraft  in  a  conflict  are 
equipped  with  ATARS  and  both  are  TFB.  The  look¬ 
ahead  time  threshold  for  conflicts  of  this  type 
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should  be  increased  to  40  seconds  at  ranges 
greater  than  50  nai.  Porther  study  is  required  to 
extend  this  recossendation  to  encounters  of  other 
types. 


*-5-21 


A-6.  COMPARISON  OF  SIMULATION  AID  BEii  1QBLD 
RADAR  PRBOBS 

Using  a  Honte  Carlo  simulation  for  evaluating 
different  approaches  to  improving  ATARS 
perfornance  at  long  ranges  has  many  advantages. 
However,  the  validity  of  the  assumed  surveillance 
errors,  pilot  delays,  etc.,  must  be  proved  if  much 
credence  is  to  be  placed  in  the  results.  One 
aethod  available  tc  validate  surveillance  errors 
is  to  coapare  plots  of  actual  radar  reports  with 
those  of  siaulated  radar  reports.  This  would  not 
be  the  aost  desirable  verification  of  the  radar 
error  aodels.  A  aore  convincing  study  would 
calculate  the  statistics  of  the  radar  errors  that 
were  aeasured  in  flight.  Such  a  study  has  been 
conducted.  However,  this  study  (reported  in 
Reference  4)  presents  only  overall  statistics. 

The  najor  concern  of  the  study  reported  in  this 
appendix  has  been  with  the  perfornance  of  ATAES 
for  100  knot  aircraft  at  100  nai.  Most  such 
aircraft  visible  to  a  DABS  sensor  would  be  at  or 
near  the  floor  of  surveillance  coverage,  which  is 
about  6000  feet  above  the  elevation  of  the  sensor. 
Thus,  the  current  study  should  be  concerned  about 
radar  errors  near  the  floor  of  coverage.  These 
would  be  expected  to  be  greater  than  the  errors 
overall.  No  statistics  on  the  errors  near  the 
coverage  floor  at  a  range  of  100  nai  were 
available  and  resources  did  not  exist  to  conpile 
such  statistics. 

Thus,  comparable  plots  of  data  fron  the  simulation 
and  from  the  real  world  have  been  prepared.  This 
was  done  using  real  world  data  fron  Clenenton,  New 
Jersey,  where  a  transportable  CAES  sensor  bad  been 
located  tenporarily  (see  Reference  4).  The  radar 
was  64  feet  above  ground  on  terrain  that  is  fairly 
flat  with  no  najor  obstructions.  Three  aircraft 
that  were  observed  by  this  sensor  were  plotted, 
one  with  a  circunf erential  heading  (with  respect 
to  the  radar) ,  and  two  with  a  radial  heading. 

in  preparing  these  plots,  a  track  of  interest  was 
selected  fron  the  real  world  data.  A  siaulated 
aircraft  was  then  developed  which  had  the  sane 
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speed,  heading,  and  position  with  respect  to  the 
radar.  The  simulated  aircraft  was  flown  over  a 
trajectory  which  watched  that  of  the  real  world 
track.  Badar  reports,  using  an  azinutb  error  of 
0.1  degree  one-sigaa,  were  siaulated.  Data  fron 
the  real  world  and  froa  the  siaulation  was  then 
plotted  to  an  identical  scale.  Since  the  plotting 
prograa  perforas  autoaatic  scaling,  it  was 
necessary  to  add  one  duaay  point  to  the  file  of 
radar  reports  to  achieve  the  saae  scales.  This 
point  appears  as  an  isolated  point  in  one  corner 
of  every  plot.  The  coordinates  relative  to  the 
radar  (x-axis  towards  the  East,  y-axis  towards  the 
North)  of  the  first  point  on  the  track  are  given 
in  parentheses  as  a  aeans  of  indicating  the 
aircraft's  position  and  beading  relative  to  the 
radar.  The  points  plotted  are  the  raw  radar 
re  ports. 


Plots  of  the  circuaferential  tracks  are  shown  in 
Figures  A-6-1  and  A- 6-2.  The  aircraft  is  flying 
at  130  knots,  with  a  range  between  104  and  106 
nautical  ailes.  Very  little  radial  error  is 
noticed  in  the  real  world  plot  (Figure  A-6-1) , 
which  is  to  be  expected.  The  najor  part  of  the 
error  is  circuaferential  causing  several 
relatively  large  gaps  between  radar  reports.  As 
the  simulation  plot  (Figure  A-6-2)  shows,  the 
siaulated  radial  error  is  very  conservative.  Gaps 
due  to  circuaferential  error  can  also  be  found 
throughout  the  aircraft's  siaulated  course. 


A- 6. 2 _ Plots  of  gadial  Tracks 

Two  sets  of  radial  plots  were  aade,  both  of  the 
saae  aircraft.  The  tracks  in  Figures  A-6-3  and 
A-6-4  have  a  range  between  92  and  100  nautical 
ailes  and  altitudes  between  5400  and  6100  feet. 

The  aircraft  is  descending  with  an  approxiaate 
heading  of  260  degrees.  The  circuaferential  error 
is  aore  apparent  in  the  real  world  data  when  the 
aircraft  is  flying  along  a  radial.  There  are 
enough  fairly  regular  reports,  however,  to  get  a 
good  approxiaation  of  the  aircraft's  flight  path. 
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PLOT  OF  SIMULATION  CIRCUMFERENTIAL  FLIGHT 
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The  simulation  plot  (Figure  1-6-4)  shows  roughly 
comparable  behavior.  It  a  range  of  100  nautical 
miles,  the  coverage  floor  is  nominally  at  6000 
feet,  which  means  this  aircraft  is  just  at  the 
coverage  floor  where  a  larger  amount  of  radar 
error  is  normally  fouud. 

The  second  set  of  simulation  and  real  world  plots 
is  from  the  sane  aircraft,  now  at  a  range  of  80  to 
90  nautical  miles  and  an  altitude  of  3900  to  4400 
feet.  A  very  smooth  track  is  shown  (Figure 
1-6-5) .  There  is  alnost  no  circumferential  error 
for  the  majority  of  the  flight,  with  what  there  is 
concentrated  at  a  range  of  80  nautical  miles  and 
an  altitude  of  3900  feet.  ATARS  would  be  affected 
very  slightly  by  this  set  of  surveillance  errors. 
The  comparable  simulation  plot  is  presented  in 
Figure  1-6-6. 

One  high  altitude,  high  speed  (39,000  feet,  375 
knots)  aircraft  was  plotted.  Figure  1-6-7  clearly 
shows  good  accuracy  in  the  radar  reports, 
undoubtedly  as  good  as  the  0.05  degree  one-sigma 
azimuth  error  reported  in  Reference  4.  The  track 
simulated  for  this  aircraft  is  presented  in  Figure 
1-6-8.  This  plot  shows  that  the  0.1  degree  one 
sigma  radar  error  is  guite  conservative  in  this 
case. 


A- 6.  3 _ Conclusions  Regarding  the  Simulation  Radar 

Error  Model 

It  appears  that  the  0.1  degree  one-sigma  radar 
azimuth  error  is  reasonable  to  use  for  simulation 
of  100  knot  aircraft  at  100  nautical  miles,  since 
the  real  world  seems  to  provide  this  at  the  floor 
of  altitude  coverage.  Most  100  knot  aircraft  that 
would  be  seen  at  100  nautical  miles  would  be  very 
near  the  coverage  floor.  (Of  course,  many 
aircraft  of  this  speed  class  would  be  below  radar 
coverage  at  this  range.)  For  aircraft  that  are 
clearly  above  the  coverage  floor,  use  of  the  0.1 
degree  azimuth  error  in  simulation  seems  to  be 
guite  conservative.  The  surveillance  error  model 
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of  the  Honte  Carlo  simulation  provides  a 
conservative  representation  of  the  real  world 
situation. 


A-7 .  SOBWARI  AHD 


The  resolatioa  perfornance  of  the  current  ATABS 
for  high  perfornance  aircrart  suffers  no 
degradation  when  the  aircraft  are  at  ranges  fron 
the  sensor  as  great  as  100  nni.  However/  the 
number  of  false  alarns  increases  steadily  as  range 
increases.  The  higher  false  alarn  rate  at  longer 
ranges  is  a  direct  result  of  the  increased 
surveillance  errors.  There  is  no  leans  for 
preventing  the  increase  in  false  alans  with  range 
that  does  not  sacrifice  safety. 

The  resolution  perfornance  of  the  current  ATABS 
for  low  perfornance  aircraft  worsens  noticeably  at 
longer  ranges.  Encounters  involving  low 
performance  aircraft  are  resolved  with  horizontal 
maneuvers.  With  horizontal  maneuvers,  an  ATABS 
false  alarm  can  actually  cause  a  hazardous  near 
nid-air  situation  in  an  encounter  that  would  have 
been  safe  without  the  ATARS  naneuver. 

The  most  effective  neans  of  inproving  ATARS 
resolution  perfornance  with  horizontal  laneuvers, 
while  minimizing  the  increase  in  false  alarns,  is 
to  increase  the  look-ahead  tine  fron  32  to  40 
seconds.  However,  even  this  modification  did  not 
eliminate  all  caused  failures. 

Because  the  ATABS  algorithms  can  cause  resolution 
failure  when  false  alarns  are  issued  at  longer 
ranges,  it  is  recommended  that  the  ATARS 
algorithms  be  modified  to  use  vertical  resolution 
for  all  encounters  beyond  50  nni,  if  both  aircraft 
are  VFF  and  are  ATABS-eguipped.  It  is  also 
reconnended  that  the  look-ahead  tine  for 
encounters  in  which  both  aircraft  are  eguipped, 
VFR,  and  have  speeds  less  than  150  knots,  be 
increased  from  32  to  40  seconds  beyond  50  mi. 

When  these  modifications  are  used,  ATABS  provides 
resolution  perfornance  at  100  nni  that  is 
comparable  to  that  at  30  nni. 

The  use  of  a  turn-to-heading  algorithn  for 
encounters  involving  two  TFB  eguipped  aircraft  at 
longer  ranges  provides  no  inprovenent  in 


resolution  performance  relative  to  the  current 
IT  IRS  algorithm.  Vo  conclusion  can  be  drawn  froa 
this  work  about  the  aerit  of  a  turn-to-heading 
algorithm  for  encounters  in  which  one  aircraft  is 
not  equipped  with  ITIBS. 

The  use  of  a  0.1  degree  one-sigaa  azimuth  error 
for  simulating  DIBS  surveillance  errors  when 
aircraft  are  near  the  floor  of  coverage  seems  to 
be  appropriate,  based  upon  the  brief  qualitative 
comparison  of  simulation  and  real-world  errors 
conducted  here.  When  aircraft  are  well  above  the 
coverage  floor,  use  of  a  0.1  degree  one-sigaa 
azimuth  error  provides  a  conservative  model  for 
radar  azimuth  errors. 

Ill  other  aspects  of  the  ITIBS  logic  and  a  wider 
variety  of  geometries  should  be  analyzed  before 
the  study  of  ITIBS  performance  at  long  range  is 
considered  complete.  Additional  study  should 
consider  eguipped-unequipped ,  IIB-7FB,  vertically 
maneuvering  and  mixed  speed  encounters. 
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APPENDIX  B 

COMAPRISON  OF  IMPLEMENTING  ATARS  AT  THE 
DABS  SITE  VS.  THE  ATC  FACILITY 

D .  J .  Bryant 


B-1.  INTBODOCTIOB 

Id  this  appendix  the  cost  tradeoffs  between  two 
alternative  siting  scenarios  for  Automatic  Traffic 
Advisory  and  Besolution  Service  (1T1BS)  are 
investigated  and  both  quantitative  and  qualitative 
differences  of  the  two  systens  are  addressed. 

As  originally  designed,  ATABS  is  an  integral  part 
of  the  Discrete  Address  Beacon  Systen  (DABS) .  Its 
function  is  to  provide  automated  collision 
avoidance  protection  to  Instrument  Flight  Buies, 
(IFB)  and  Visual  Flight  Buies,  (VFE)  aircraft 
equipped  with  DABS  transponders  and  cockpit 
displays.  An  engineering  wodel  DABS, 
incorporating  the  ATABS  features,  has  been 
delivered  to  National  Aviation  Facilities 
Experimental  Center  (NAFEC)  for  testing  and 
evaluation.  The  specifications  for  this 
engineering  model  have  been  used  as  a  baseline  for 
making  the  system  comparisons  presented  in  this 
study.  Specifically,  the  ATABS  system  located  at 
the  DABS  site  has  keen  assumed  to  perform  as 
specified  in  the  DABS  Engineering  Beguirenent  (EB) 
(see  Deferences  1  and  2).  No  attempt  has  been 
made  in  this  document  to  verify  either  the 
reliability  or  maintainability  estimates  provided 
by  the  DABS  contractor,  or  to  forecast  the  outcome 
of  NAFEC  testing. 

The  second  alternative  for  the  location  of  ATABS 
involves  relocating  the  collision  avoidance 
hardware  and  software  away  from  the  CABS  radar 
site  to  the  local  Air  Traffic  Control  (ATC) 
facility.  For  terminal  radars  the  physical 
separation  of  these  two  locations  is  generally 
small — under  5  miles.  For  long  range,  en  route, 
radars,  the  distance  between  the  two  locations  can 
be  much  larger,  stretching  to  several  hundred 
miles.  In  either  case,  the  ATABS  that  would  be 
implemented  at  the  ATC  facility  in  this 
alternative  has  been  assumed  to  meet  the 
requirements  of  the  DABS  EB.  In  this  way 
differences  between  the  alternatives  of  ATABS 
located  at  the  DABS  site  and  located  at  the  ATC 
facility,  can  be  quantized  in  terms  of  cost  while 
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Maintaining  as  otadT  as  possible  the  sase 
perforaance. 

In  general,  cost  inforaation  has  been  presented  on 
a  per  site  basis  using  as  a  baseline,  costs 
associated  with  the  engineering  sodel  0A6S  and 
ATARS.  Bo we Ter,  in  sose  instances  averaged  systea 
costs  or  estiaated  costs  associated  with  a 
production  version  DABS  nay  represent  a  aore 
realistic  indication  of  the  true  cost  difference. 
Where  average  costs  have  been  used,  this  has  been 
clearly  noted,  along  with  the  assumptions 
necessary  to  arrive  at  the  cost  figures  given. 

Future  refineaents  in  the  designs  of  DABS  and/or 
ATARS  that  nay  cone  out  of  the  RAFEC  testing  have 
not  teen  factored  into  this  analysis.  Bather,  an 
attempt  has  made  to  identify  soae  potential 
changes  in  the  hardware  and  software  and  to  report 
their  probable  iapact  on  the  cost  question. 
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B-2.  DEFINITIONS  OP  THE  A1TEBMATIVES 


The  two  alternatives  described  below  have 
been  chosen  tc  be  nearly  equal  in 
performance,  neeting  the  specifications  given 
in  the  DABS  EF,  with  both  alternatives 
performing  the  function  of  collision 
avoidance  for  appropriately  equipped  IFF  and 
VFE  aircraft.  Each  alternative  has  both 
terminal  and  long  range  radar  components  with 
the  terminal  installations  providing 
surveillance  data  to  the  local  ATC  facility 
and  the  Air  Route  surveillance  Radars  (ABSR's 
or  long  range  radars)  tied  into  the  regional 
Air  Route  Traffic  Control  Center  ( ARTCC) . 

The  terminal  radars  have  a  single  antenna 
face  rotating  at  about  12-15  rpn  giving  a 
complete  scan  every  4-4.7  seconds.  The  long 
range  radars  are  dual  faced,  having  two 
antennas  operating  in  the  back-to-back  node. 
These  rotate  at  a  much  slower  rate,  about  5-6 
rpm.  Ose  of  the  back-to-back  antennas, 
however,  gives  a  higher  effective  scan  rate, 
with  one  complete  scan  every  5-6  seconds. 

As  required  in  the  ER,  both  the  site-located- 
ATARS  and  the  f acility-located-ATABS  have  the 
capability  of  communicating  with  adjacent 
sites  for  handoffs,  remote  surveillance  and 
ATARS  multiple  uplinks.  These  sites  are 
asssmed  to  be  tied  together  for  intersite 
communications  via  a  master  network  generally 
modeled  after  the  lower  cost  Star  network 
presented  in  Reference  3.  In  this  design, 
adjacent  DABS/ATARS  sites  communicate  over 
direct  lines  tc  the  ARTCC.  Bere,  a  special 
switch  similar  to  that  proposed  for  the 
National  Airspace  Data  In  Interchange  Network 
(NADIN)  directs  messages  to  the  appropriate 
outgoing  line.  (This  communications 
architecture  is  referred  to  as  a  Star 
network.)  Costs  are  kept  down  by  using 
existing  two-way  ARTS  to  National  Airspace 
System  (NAS)  lines  for  the  DAES/ATABS  to  NAS 
links.  (NAS  is  used  here  as  an  abbreviation 


E-2-1 


to  lean  the  NAS  En  Boute  Computer  systei 
located  at  an  ABTCC.)  This  is  feasible  since 
terminal  DABS  sites  are  located  within  a 
short  distance  of  the  ATC  facility  that  they 
serve  and  the  cost  of  upgrading  these  lines 
is  generally  less  than  the  cost  of  adding  new 
lines.  Although  wost  APTS  III  sites  are 
currently  tied  to  NAS,  projections  call  for 
only  sowe  of  the  ARTS  II  sites  to  be  tied  in; 
if  these  sites  are  to  be  part  of  the 
interconnected  DABS  network,  additional  lines 
at  full  cost  would  have  to  be  used.  In 
addition  to  developaent  of  the  NADIR  switch, 
it  is  assuwed  implicitly  in  the  Star  network 
that  sowe  hardware  or  software  could  be 
provided  at  the  ARTS  end  of  the  ARTS/NAS  line 
to  switch  messages  from  NAS  to  ARTS  or  DABS. 
This  hardware  or  software  would  also  handle 
data  in  the  other  direction,  multiplexing 
ARTS  and  DABS  messages  addressed  to  NAS. 

It  is  also  assumed  that  long  range  radar 
sites  will  be  a  part  of  the  DABS  network 
along  with  the  terminal  sites,  and  that  these 
long  range  sites,  in  many  cases,  will  have 
terminal  radars  as  their  nearest  neighbors. 
While  these  en  route  radars  would  continue  to 
provide  radar  surveillance  data  to  NAS  for 
all  aircraft  within  a  large  airspace  volume, 
they  would  provide  ATARS  service  in  a  smaller 
volume  since  absolute  azimuth  errors  increase 
with  distance  causing  degraded  ATARS 
performance  beyond  100  nmi.  Onder  this 
assumption,  en  route  radars  would  hand  off 
aircraft  to  nearby  terminal  radars  for 
collision  avoidance  protection  while 
continuing  to  provide  NAS  with  surveillance 
on  that  aircraft.  This  means  that  ATABS 
would  generally  hand  off  responsibility  from 
an  en  route  radar  to  a  terminal  radar,  rather 
than  only  to  another  en  route  radar. 

B-2.1  ATABS  at  thq  DABS  Site 

The  engineering  model  design  has  been  taken 
as  representative  of  a  production  model  ATABS 


of  the  type  to  be  located  at  the  radar  site. 
In  this  design,  ATABS  receives  target  reports 
froa  DIBS  via  global  aeaory  with  ATABS 
operating  essentially  independently  of  DABS. 
DABS  writes  these  target  reports  for  ATABS 
use  into  a  buffer  in  global  aeaory  within 
3/32  of  a  scan  after  detecting  the  target. 
ATABS  systeaatically  extracts  the  reports 
froa  this  buffer  and  perforas  its  own 
tracking.  After  coapletion  of  collision 
avoidance  processing,  ATABS  returns 
resolution  advisories  for  aircraft  to  the 
DABS  sensor  by  writing  these  into  the  uplink 
buffer  located  in  global  aeaory.  DABS  reads 
the  advisories  froa  this  buffer  and  uplinks 
then  to  the  appropriate  aircraft  when  the 
antenna  is  pointed  in  the  correct  direction. 
This  provides  an  extreaely  siaple  and 
efficient  conaun ications  systea,  with  all 
coaaunication  between  DABS  and  ATABS  taking 
place  internally  through  global  aeaory.  In 
addition,  the  engineering  aodel  DABS  handles 
all  external  coaaunications  for  the  ATABS 
software,  writing  incoming  aessages  into 
appropriate  sections  of  global  aeaory. 

Primary  external  coaaunications  originated  by 
ATABS  include  uplinks  to  aircraft,  controller 
alerts  which  are  passed  to  an  ATC  facility 
and  conflict  table  exchanges  with  reaote 
ATABS  sensors.  Inputs  to  ATABS  include  the 
surveillance  reports  from  the  DABS  sensor, 
conflict  table  exchange  messages  froa  reaote 
ATABS  sensors  and  non-surveillance  inputs 
including  pilot  test  reguests, 
acknowledgments  and  data  link  reguests. 

Among  these,  surveillance  makes  up,  by  far, 
the  greatest  volume  of  inputs  with  one  report 
received  for  each  target  on  each  scan. 

B-2. 2 _ Surveillance  and  Coaaunications 

Overview 

Upon  receipt  of  a  beacon  report,  CABS 
attempts  to  correlate  that  report  with 
reports  received  froa  the  primary  radar 
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digitizer.  If  successful,  DIBS  prepares  a 
radar-reinforced  digital-surveillance  report 
for  transmission  to  ATC.  A  siailar  report  is 
also  written  into  global  aeaory  for  access  by 
ATARS.  If  the  beacon  report  cannot  be 
successfully  correlated,  slightly  different 
aessages  are  sent  to  ATC  and  written  into 
global  aeaory.  ATARS  continuously  reads  the 
surveillance  buffer  containing  the  target 
reports  and  begins  track  correlation.  If,  in 
collision  avoidance  processing,  a  conflict  is 
detected,  ATABS  writes  aircraft  messages  into 
the  uplink  buffer  and  writes  a  controller 
alert  into  the  controller  alert  buffer.  For 
conflicts  occuring  in  "seams"  between  sites, 
coordination  nust  be  provided  to  resolve  site 
responsibility  and  guarantee  compatible 
selection  of  resolution  advisories.  This 
coordination  takes  place  through  exchange  of 
conflict  tables  between  remote  sensors. 

Renote  sites  also  iapact  the  advisory 
selection  process  if  the  local  sensor  has 
lost  contact  with  an  aircraft  under  its 
jurisdiction.  In  this  case,  request  for  data 
is  sent  to  an  adjacent  sensor  which  provides 
a  target  report.'  These  reports  are  sent  to 
ATABS  through  DABS  just  as  are  local 
surveillance  reports.  ATABS  can  also  reguest 
aultiple  uplink  of  advisories  froa  adjacent 
DABS  sensors.  Requests  for  this  service  are 
transmitted  through  the  local  DABS  to  an 
adjacent  sensor  via  the  Star  network  (Figure 
B-2-1)  and  the  modified  HADIN  switch 
mentioned  earlier.  In  the  site-located  ATARS 
design,  aessages  from  the  local  ATC  facility 
could  be  sent  to  the  local  DABS  where  they 
would  be  added  to  the  communications  line  and 
forwarded  to  the  ARTCC.  Bere,  an  appropriate 
switching  function  would  sort  out  aessages 
addressed  to  the  BAS  en  route  system  from 
aessages  addressed  to  other  DABS  sites, 
forwarding  ongoing  messages  to  the 
appropriate  site. 

Figure  E-2-1  shows  two  possible 
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FIGURE  B-2-1 

STAR  NETWORKS  FOR  TERMINAL  TO  EN  ROUTE  COMMUNICATIONS 
FOR  SITE-LOCATED  ATARS 
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configurations  for  the  Star  network  when 
AT ARS  is  at  the  DABS  site.  In  one,  the  DABS 
system  becoaes  the  terainus  for  the  terainal 
to  en  route  coaaunications  line.  In  the 
other,  ARTS  is  the  terainus.  Froa  the  Foint 
of  view  of  ATARS,  it  would  be  preferrable  for 
DABS  to  be  the  terainus  because  ATARS  would 
then  have  wore  direct  coaaunications  with 
other  sites.  Sone  of  the  ATARS  site-to-site 
messages  are  tine  critical.  These  would 
undergo  additional  tine  delays  because  of 
additional  nodes  in  the  configuration  with 
ARTS  as  the  terainus.  In  this  case,  the 
delivery  seguence  would  be:  ATARS-DAES-ARTS- 
N AS-ARTS-DABS-ATARS.  Each  itea  in  this  list 
represents  a  node  which  introduces  its  own 
delivery  delay. 

On  the  other  hand,  the  current  configuration 
has  ARTS  as  the  terainus  of  the  terainal  to 
en  route  coomunications  line.  Changes  to  the 
ARTS  coaaunications  interface  would  be 
required  if  DABS  were  aade  the  coaaunications 
terainus  when  DABS  and  ATARS  are  introduced. 

B-2^3 _ ATARS  at  the  ATC  Facility 

The  second  alternative  considered  in  this 
study  locates  ATARS  at  ATC  facilities  rather 
than  at  DABS  radar  sites.  It  has  been 
suggested  that  this  arrangeaent  would  reduce 
the  amount  of  equipment  at  the  radar  site, 
facilitating  hardware  and  software 
maintenance.  Onder  this  arrangeaent,  ATARS 
would  tap  the  DABS  to  ATC  surveillance  line 
for  target  reports  to  update  the  ATARS 
Central  Track  Store  (CTS) .  ATARS  to  ATC 
communications  such  as_ controller  alerts 
could  take  place  directly  within  the  ATC 
facility  without  transition  through  DABS 
hardware,  and  the  collocation  of  ATARS  and 
ATC  would  permit  easier  access  to  ATC  data 
such  as  flight  plans  and  wind  aaps,  if  such 
data  were  eventually  to  be  used  by  ATARS. 
(This  data  is  not  used  in  the  current  ATARS 
design. ) 
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Uplinks  to  conflicting  aircraft  would  be  sent 
to  DABS  over  a  two-way  conaunications  line 
linking  the  facility-located  ATABS  with  DABS. 
Figure  B-2-2  shows  the  two  possible 
conaunications  configurations  when  ATABS  is 
located  at  the  ABTS  facility.  In  one  case 
DABS  is  the  terainus  of  the  terainal  to  en 
route  conaunications  line.  In  the  other  ABTS 
is  the  terainus.  When  ATABS  is  iapleaented 
within  ARTS,  it  is  preferrable  to  have  ABTS 
as  the  terainus  to  reduce  the  conaunications 
delay  for  ATABS  site-to-site  aessages. 

Reliability  of  the  ATABS  function  could  be 
aaxiaized  by  having  it  reside  in  its  own 
conputer  complex  co-located  with  the  ATC 
computers,  rather  than  in  the  ATC  coaputers. 
This  would  facilitate  conputer-to-conputer 
conaunications  while  not  degrading  the  ABTS 
or  NAS  equipnent.  This  also  provides  for 
standardization,  with  the  systen  designed  for 
ARTS  III  also  useable  at  ABTS  II 
installations  which  do  not  have  the  conputer 
capacity  or  the  tracking  algorithms  required 
to  perform  ATABS  processing  internally. 
Although  ARTS  III  and  NAS  installations  nay 
have  soae  additional  computer  capacity 
available,  it  would  be  desirable  at  these 
locations  to  maintain  the  separation  of  ATARS 
and  ATC  coaputers  so  that  ATABS  would 
continue  to  provide  collision  avoidance 
protection  in  the  event  of  failure  of  the  ATC 
equipnent.  Such  an  arrangement  would  be 
essential  if  the  reliability  of  ATABS  at  ATC 
facilities  is  to  be  as  high  as  for  ATABS  at 
DABS  sites. 
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B-3.  QUALITATIVE  DIPPEBIMCBS  HD  SIBIL  I  BITIES  QfIHE 
ALTERNATIVES 


Although  there  are  aany  iteas  affectinq  the 
overall  cost  of  the  two  alternatives,  only  those 
that  differ  froa  one  to  the  other  are  examined  in 
this  analysis,  in  this  respect,  this  is  not  a 
cost  analysis,  but  a  cost  difference  analysis 
addressing  only  iteas  that  differ  substantially 
between  the  alternatives.  In  this  way,  it  is 
possible  to  exclude  froa  consideration  future 
refineaents  such  as  a  through  the  transponder, 
aulti-site  coordination  logic  or  a  new  sector 
oriented  approach  to  ATARS  processing  (see 
Appendix  G)  which  would  affect  both  alternatives 
equally.  Excluded  also  are  the  costs  of  design 
changes  to  the  engineering  nodel  systea  necessary 
to  accoaodate  ATARS  at  the  ATC  facility.  This 
aeans  that  the  effect  of  rewriting  software  in 
accordance  with  facility-located  ATARS  has  not 
been  included,  but  that  additional  hardware 
necessary  to  perfora  those  functions  has  been 
included.  Thus,  the  cost  differences  considered 
are  only  the  procureaent  and  operations  costs. 

They  do  not  include  developaent  costs. 

One  costly  function,  the  aethod  of  aulti-site 
coordination,  has  been  assuaed  to  "wash  across" 
the  location  question,  playing  no  part  in  the  cost 
differencing  between  the>  two  alternatives.  As 
stated  earlier,  site-to-site  coaaunication  has 
been  assuaed  to  take  place  using  the  Star  network 
of  Reference  3  with  no  cost  advantage  given  to 
either  alternative.  Although  ATARS  at  ATC  would 
have  to  coaaunicate  with  the  reaotely  located  DABS 
for  uplink  of  ATARS  aessages,  no  additional  cost 
is  associated  with  adding  the  saall  voluae  of 
ATARS  to  DABS  non-surveillance  coaaunications  to 
the  already  existing  (assuaed  under  the  Star 
concept)  two-way  ATC  to  DABS  line.  In  this  study, 
no  detailed  design  effort  has  been  directed  toward 
establishing  the  protocol,  or  the  software  and 
hardware  reguireaents  for  this  D ABS/ATC  interface, 
as  such  an  effort  would  require  a  great  aaount  of 
detail  and  is  unlikely  to  affect  the  guestion  of 
where  ATARS  is  to  be  located. 
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One  factor  which  does  enter  the  cost  analysis 
concerns  the  anount  of  intonation  that  mst  he 
transmitted  to  ATARS  within  a  short  time.  For 
ATARS  at  the  DABS  site,  supply  of  target  reports 
takes  place  almost  instantaneously  with  the 
reports  being  written  into  the  shared  global 
memory.  lith  ATARS  at  the  ATC  facility,  these 
reports  form  a  queue  to  be  sent  to  the  ATC 
location.  The  engineering  model  design,  built  to 
the  DABS  BR  specifications,  provides  a  minimum 
transmission  capacity  of  9600  bps  for  this 
surveillance  data.  Onder  high  instantaneous 
loading  of  the  sensor,  as  would  occur  when  400 
aircraft  are  found  within  an  azimuth  wedge  of  90 
degrees,  surveillance  data  generation  exceeds  this 
transmision  capacity  resulting  in  a  time  delay 
while  the  data  waits  in  the  gueue.  Since  this 
delay  is  short,  it  nay  be  unimportant  to  ATC 
operations  which  proceed  more  slowly  with 
communications  between  the  controller  and  the 
aircraft  available  at  any  time.  For  ATARS, 
however,  even  a  short  transmission  delay  can 
result  in  a  more  substantial  delay  in  uplink  of  an 
advisory  which  must  wait  until  the  DABS  antenna 
again  points  in  the  correct  direction.  This 
transmission  delay  nay  result  in  selection  of 
ATARS  resolution  advisories  based  on  older  data 
when  acre  recent  data  has  actually  been  measured 
by  the  sensor.  The  use  of  older  data  can  be 
particularly  degrading  if  aircraft  re  maneuvering 
at  the  tine  of  conflict  detectior 

Figure  B-3-1  illustrates  a  typical  case  of  delay 
in  delivering  ATARS  advisories  that  could  occur 
under  high  sensor  loading.  events  occurring 
during  one  scan  of  the  antenna  are  indicated  by 
circled  letters.  The  antenna  rotates  clockwise. 
The  circled  letters  are  placed  at  the  axiauth  that 
the  antenna  would  have  when  the  corresponding 
event  occurs.  The  situation  portrayed  in  Figure 
B-3-1  involves  a  conflict  between  two  aircraft  not 
in  ATARS  seam  areas.  (Sean  areas  are  areas  of 
overlapping  coverage  between  two  ATARS  sites  in 
which  multi-site  coordination  must  be  conducted 
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FIGURE  B-3-1 

ATARS  EVENT  SEQUENCE  FOR  CONFLICT  NOT  IN  SEAMS 


for  resolution  advisories..) 

It  (l)  the  DABS  antenna  passes  the  subject 
aircraft  that  has  just  cose  into  conflict  with 
another  aircraft.  Op  to  3/32  scan  delay  is 
allowed  during  which  DABS  does  correlation  and 
tracking  before  the  target  report  is  presented  to 
ATARS  (B) .  ATARS  sector  processing  (as  nodified 
in  the  engineering  aodel)  handles  airplanes 
individually  without  waiting  to  receive  a  full 
sector  of  data.  This  aeans  that  only  a  short  tine 
(nuch  less  than  1/32  scan)  is  reguired  to  coaplete 
sector  processing  for  the  subject  aircraft.  But 
if  an  epoch  cycle  begins  (C)  just  prior  to 
conpletion  of  sector  processing  for  this  aircraft, 
detection  and  naster  resolution  would  be  based  on 
the  older  data  existing  at  the  start  of  that  epoch 
cycle  rather  than  the  newer  updated  data.  (An 
epoch  cycle  is  one  conplete  cycle  of  detection  and 
resolution  processing  for  all  aircraft  in  the 
ATARS  data  base.  A  new  cycle  is  started  every  two 
seconds.)  If  ATARS  were  to  deliver  the  aessage 
generated  on  the  first  epoch  cycle,  it  would  be 
based  on  old  data.  If,  however,  ATARS  waits  until 
the  second  epoch  cycle  to  generate  a  aessage,  it 
will  not  be  able  to  deliver  the  aessage  to  DABS  in 
tiae  for  it  to  be  sent  on  the  next  antenna  scan. 
This  is  explained  below. 

The  second  epoch  cycle  would  begin  at  (D) .  This 
tine  the  newer  data  would  be  used  to  resolve  any 
conflicts.  Construction  of  uplink  messages  at  the 
end  of  resolution  processing  for  all  aircraft  not 
in  seal  areas  takes  place  at  (E) .  Here  the 
antenna  is  already  passing  the  aircraft,  but  DABS 
is  allowed  an  additional  4/32  scan  to  prepare  to 
uplink  the  aessage.  By  the  tiae  the  aessage  is 
ready  (P)  the  antenna  is  well  past  the  aircraft. 
Although  the  aircraft  will  receive  an  uplink  on 
the  next  scan,  the  result  is  that  under  high 
sensor  load  all  aircraft  in  the  three  sectors 
before  an  epoch  cycle  begins  will  be  receiving 
coaaands  based  on  data  that  is  one  scan  old. 

Since  this  area  which  is  cross-hatched  in  the 
figure  is  present  iaaediately  preceding  each  epoch 
cycle,  6/32  of  the  surveillance  area  could  be 
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If  the  sensor  were  not  fully  loaded,  then 
detection  and  resolution  could  be  completed  at 
soae  point  prior  to  (E)  .  If  the  load  is 
sufficiently  light,  there  will  be  tine  for  DABS  to 
deliver  the  aessage  on  the  next  scan  and  no 
aircraft  will  receive  aessages  based  on  old  data. 

For  aircraft  in  the  seaas  the  situation  is  worse 
since  sean  processing  aust  wait  until  alaost  the 
end  of  the  two-second  epoch  cycle.  Figure  B-3-2 
shows  the  situation  for  sean  conflicts.  ATABS 
would  deiver  the  uplink  aessage  to  DABS  at  (E)  in 
this  figure  and  the  sensor  would  not  be  able  to 
deliver  the  aessage  before  point  (F) .  The  areas 
where  aircraft  in  the  seaas  would  receive 
advisories  based  on  old  data  are  shaded  in  Figure 
B-3-2. 

For  an  antenna  with  a  4.7  second  rotation  period 
these  effects  are  soaewhat  litigated,  with  a 
reduction  in  the  size  of  the  shaded  areas,  but  any 
further  delay  in  receipt  of  target  reports  would 
increase  the  total  area  where  old  data  is  used  by 
about  14  sectors  per  second  of  delay. 

The  purpose  of  this  discussion  of  delivery  delays 
was  to  indicate  that  even  the  current  ATABS  aulti- 
site  design  is  subject  to  delivering  advisories 
based  on  old  data  when  the  sensor  is  operating  to 
capacity  or  conflicts  occur  in  the  seaas.  It  is 
thus  clear  that  any  additional  delay  in  receiving 
target  reports  froa  DABS  will  have  the  undesirable 
effect  of  increasing  the  area  in  which  advisories 
will  be  delivered  based  on  old  data. 

B-3.2  Duplication  of  Eguipaent 

Another  itea  affecting  the  cost  of  the  two 
alternatives  is  duplication  of  eguipaent.  In  the 
current  engineering  aodel  design,  ATABS  and  CABS 
share  several  systen  hardware  coaponents  including 
global  nenory,  power  supply  cabinets,  and 
coaaunications  processors.  For  ATABS  at  the  ATC 
facility  soae  duplication  of  these  coaponents 
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FIGURE  B-3-2 

ATARS  EVENT  SEQUENCE  FOR  CONFLICT  IN  THE  SEAMS 


would  be  necessary  without  significant  reduction 
in  the  size,  nunber  or  cost  of  conponents  at  the 
DABS  site.  In  particular  reaoval  of  the  8  ATABS 
nicro-processors  fron  the  DABS  site  is  not 
expected  to  significantly  reduce  the  cost  of  the 
power  supply  required  there,  but  will  reguire 
addition  of  a  power  supply  to  run  the  processors 
at  the  ATC  facility.  Sinilarly,  conaunications 
processors  will  have  to  be  added  to  the  facility- 
located  ATABS  to  handle  the  incoaing  surveillance 
data.  These  will  have  to  write  a  copy  into  global 
memory  for  ATARS  use,  and  forward  a  copy  to  ATC 
coaputers  for  standard  ATC  operations.  Since  the 
surveillance  data  received  by  the  coaputers  will 
have  been  sent  by  their  counterparts  at  the  CABS 
site,  no  reduction  iii  the  nunber  of  processors 
located  there  is  likely.  This  trend  toward 
duplication,  found  throughout  the  facility-located 
ATARS  systea,  increases  the  total  anount  of 
hardware  and  software,  diluting  the 
maintainability  benefit  gained  by  reducing  the 
nunber  of  conponents  at  the  renote  location. 

Even  when  ATARS  equipment  can  be  noved  fron  DABS 
to  ATC  without  duplication,  the  effect  on  the 
total  anount  of  equipnent  at  the  DABS  site  is 
snail.  For  example,  the  7  ATABS  aicro-conputers 
containing  ATABS  programs  make  up  only  25*  of  the 
total  DABS  conplenent  of  28  active  nicrocoaputers. 
Furtheraore,  microprocessors  sake  up  only  a 
portion  of  the  total  equipnent  at  the  DABS  site. 
Therefore,  relocating  ATABS  to  the  ATC  facility 
will  not  significantly  reduce  the  total  anount  of 
equipment  at  the  CABS  site. 
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A  similar  trend  is  found  with  respect  to  the 
software.  Current  projections  for  ATABS  indicate 
an  expected  size  of  about  35  thousand  words  for 
primary  program  storage.  The  total  anount  of  DABS 
software  runs  to  about  180  thousand  words  so  that 
ATABS  accounts  for  only  20*  of  that  total 
software.  Bhile  it  nay  be  possible  to  produce  a 
hardwired  version  of  DABS  to  eliainate  software  at 
reaote  facilities,  there  are  several  aajor 
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disadvantages  to  this.  Foremost  aaong  tu«s  is 
that  great  flexibility  would  be  lost  in  changing 
progras  paraaeters  and  logic  and  in  adapting  the 
algorithas  to  local  conditions  as  is  reguirsd  for 
example  with  the  surveillance  saps.  Another 
important  consideration  is  cost.  1  hardwired  DIBS 
would  require  considerable  re-design,  and  would 
probably  be  subsantially  sore  expensive  than  a 
software  driven  version. 

As  interaediate  points  between  hardwired  DABS  and 
the  current  engineering  aodel,  a  software  driven 
production  aodel  DABS  could  be  built  incorporating 
read  only  aeaories  (BOH) ,  programmable  read  only 
memories  (PBOHS) ,  erasable  and  programmable  read 
only  memory  (EPROHS)  or  non-volatile  random  access 
memory  (BAH)  instead  of  the  volatile  BAH  used  in 
the  current  design.  These  aeaories  provide 
different  degrees  of  program  protection  and  ease 
of  modification. 

PROHS  and  EPBOHS  are  different  from  the  volatile 
BAH  used  in  the  engineering  model  in  that  the 
contents  of  memory  are  not  lost  when  power  is  shut 
off;  rather  the  programs  and  data  stored  in  the 
memory  are  retained  and  are  available  when  power 
is  restored.  This  means  that  a  new  program  does 
not  have  to  be  loaded  from  an  external  source 
after  a  power  failure.  Flexibility  and  cost 
savings  are  provided,  however,  by  making  these 
memories  user  programmable  on  a  special  external 
PROH  programming  device. 

EPBOHS  are  re-usable.  Vhen  a  program  change  is 
desired  the  old  program  is  erased  by  exposing  the 
EPBOH  to  ultraviolet  light,  and  then  the  new 
program  is  loaded  by  reprogramming  the  EPBOH  on 
the  PBOH  programmer.  Standard  PBOHS  are  initially 
programmable  on  the  PBOH  programmer,  but  these 
cannot  be  re-used  and  must  be  replaced  with  a  new 
PROH  when  a  program  change  is  desired. 

ROH's  are  similar  to  standard  PROHS  except  that 
they  are  not  user-programmable  but  are  specially 
designed  at  the  micro  circuit  level  to  contain 
specific  instructions.  Because  these  cannot  be 
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changed  and  because  of  their  higher  cost  BOBS  are 
used  only  for  prograe  segments  that  are  very 
likely  to  renain  constant. 

Of  the  different  options  probably  the  one  aost 
suited  for  DABS  global  nenory  is  the  non-volatile 
BAH.  like  the  EPRCH,  PBOH  and  BOB  the  contents  of 
neaory  are  retained  during  power  interruptions  so 
that  programs  do  not  have  to  be  re-loaded  after 
power  failures.  In  addition,  this  type  of  nenory 
is  quite  easy  to  nodify.  When  a  change  is 
desired,  new  prograns  can  be  loaded  froa  an 
external  device  without  physically  reaoving  the 
nenory  froa  DABS. 

With  these  different  nenory  options  available,  it 
is  expected  that  DABS  will  continue  to  be  software 
driven.  If  this  is  the  case,  then  inclusion  of 
ATARS  software  at  the  DABS  site  does  not 
substantially  increase  the  conplexity  of  the 
renote  systen.  As  designed,  a  failure  of  ATABS 
does  not  affect  the  operation  of  DABS.  In  fact, 
having  the  extra  ATARS  conputers  available  allows 
DABS  to  continue  operation  by  shutting  off  ATABS 
if  the  operability  of  DABS  surveillance  processing 
is  in  jeopardy  fron  computer  failure.  This  neans 
that  location  of  ATABS  at  the  DABS  site  could 
actually  tend  to  increase  the  reliability  of  the 
other  CABS  functions. 

Support  for  this  position  cones  fron  historical 
evidence  suggesting  that  hardware  failure  is  a 
nuch  greater  cause  for  concern  than  software 
failure.  In  a  recent  Federal  Aviation 
Adninistration  (FAA)  report  (Beference  4)  total 
unscheduled  ABTS  dcwntine  for  63  facilities 
nationwide  was  reported  to  total  1381  hours  for 
the  period  7/76  to  6/77.  Software  failures 
accounting  for  35  hours  of  this  anounted  to  only 
about  2. 5*  of  that  total.  Of  the  renaining 
downtine,  equipnent  failure  accounted  for  1070 
hours,  or  about  77*  of  the  total.  This  would 
indicate  that  even  in  a  nanned  systen  such  as 
ABTS,  where  operator  intervention  is  possible, 
software  failures  can  be  nade  snail  relative  to 
the  nunber  of  hardware  outages. 
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AT IRS  has  been  designed  with  remote,  unwanned, 
operation  in  wind,  and  is  expected  to  have  a 
higher  reliability  than  ABTS.  ATABS  is  estimated 
to  have  a  Mean  Tine  Between  outage  (MTBO)  doe  to 
all  causes  of  23,753  hours  for  the  fully  redundant 
system  compared  to  only  780  hours  NTBO 
(unscheduled  causes)  exhibited  by  the  ARTS 
equipment.  Furthermore,  special  care  has  been 
taken  to  protect  against  transient  Central 
Processing  Onit  (CPO)  or  memory  failure  that  could 
go  undetected  in  traditional  periodic  maintenance. 

B-3.  4  Accessibility  for  Maintenance 

One  point  that  has  been  raised  as  a  potential 
benefit  of  locating  A1ARS  at  A7C  facilities  is 
lower  maintenance  cost  resulting  from  reduced 
travel  tine  necessary  to  make  repairs  and  perform 
maintenance  checks.  Hhile  this  may  te  a 
significant  factor  at  long  range  installations,  it 
is  not  at  terminal  facilities  where  the  radar  head 
is  typically  located  on  airport  property  and  can 
be  reached  by  a  perimeter  road  after  only  a  few 
minutes  travel.  (There  are  exceptions  such  as 
Tanpa/Sarasota.)  Furthermore,  the  majority  of 
facilities  in  high  density  areas  where  a  failure 
is  most  critical  are  terminal  facilities,  overall 
in  1976  there  were  almost  twice  as  many  terminal 
facilties  as  enroute  facilities,  with  a  higher 
percent  of  the  terminal  facilities  located  in 
heavily  traveled  areas.  For  these  reasons,  the 
value  of  reduced  travel  tine  has  been  discounted 
in  this  analysis  as  a  rationale  for  choosing  an 
ATAPS  location. 


B- 3. 5 _ Backup  for  Catas 

While  every  effort  has  been  made  to  define  the  two 
configurations  for  the  location  of  ATABS  so  that 
they  would  have  equal  performance,  it  has  been 
impossible  to  do  so  where  protection  in  event  of 
catastrophic  ATC  failure  is  concerned.  Performing 
ATARS  calculations  in  dedicated  computers  at  the 
ATC  facility  can  offer  ATABS  protection  in  event 
of  failure  of  the  ATC  computer  or  controller 
displays.  However,  there  are  some  catastrophic 


failures,  such  as  those  caused  by  sabotage, 
lightning  strikes  or  an  aircraft  crash  into  the 
building  housing  the  1TC  facility,  that  could 
disable  both  ATABS  and  the  ATC  systea 
simultaneously.  Simultaneous  failure  of  ATABS  and 
ATC  could  also  be  caused  by  any  failures  that 
would  affect  all  of  the  DABS  to  ATC  surveillance 
lines. 

Hhile  it  is  difficult  to  evaluate  guantitatively, 
there  is  a  clear  advantage,  from  an  ATC  backup 
point  of  view,  to  implementing  ATABS  at  the  DABS 
site.  Providing  backup  collision  avoidance 
protection  when  the  ATC  system  experiences  a 
catastrophic  failure  is  an  important  role  for 
ATABS.  This  role  is  carried  out  most  effectively 
when  ATABS  is  implemented  at  the  DABS  site  and  is 
physically  removed  from  the  ATC  facility. 
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The  last  section  presented  several  qualitative 
differences  between  the  facility-located  and  the 
site-located  ATABS.  Here,  these  differences  will 
be  developed  further  with  inclusion  of  cost 
estimates  for  sose  components.  The  predoninant 
costs  fall  into  two  categories:  costs  associated 
with  additional  surveillance  connunications  and 
costs  associated  with  hardware  duplication  for  the 
facility-located  ATABS.  Haintenance  differences 
between  the  two  systens  wake  up  another  snaller 
category  of  costs  which  is  also  discussed  but  not 
costed. 

B- 4. 1 _ surveillance  Connunications 

In  the  first  category,  high  instantaneous  data 
generation  rates  resulting  froa  a  sensor  loading 
of  400  aircraft  in  90  degrees,  exceed  the 
transnission  capacity  of  the  DABS  to  ATC 
surveillance  links.  Rhile  this  nay  not  be  a 
problem  for  traditional  ATC  operations,  tine 
delays  play  an  inportant  part  in  ATABS  operation. 
Generation  of  ninety-one  bit  beacon  reports  for 
each  aircraft  is  responsible  for  36,400  bits  of 
data  when  400  aircraft  are  found  in  90  degrees. 
Addition  of  13  bit  idle  characters  required 
between  ground-line  transnission  of  each  beacon 
report  increases  this  to  41,600  bits.  Assuning  an 
additional  10%  for  uncorrelated  radar  reports, 
nap,  timing  and  strobe  nessages  brings  the  total 
anount  of  data  generated  to  45,760  bits. 

B-4. 1.1  En  Boute  Badar  Considerations 

If  the  antenna  rotation  rate  is  5-6  rotations  per 
ninute,  (as  is  the  case  for  en  route  radars)  this 
neans  that  between  2.5  and  3  seconds  are  required 
to  sweep  out  the  90  degree  sector  containing  the 
400  aircraft.  For  an  antenna  rotating  at  six  rpn 
(2.5  seconds  to  sweep  out  90  degres)  this  yields  a 
data  generation  rate  of  18  thousand  bits  per 
second  (15  thousand  for  the  five  rpn  antenna.) 
These  data  generation  rates  exceed  the  line 
capacity  given  by  the  three  4800  bps  lines 
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specified  in  the  ER  by  six  to  27  percent. 

Since  all  DABS  sites  nationwide  will  not  handle 
400  aircraft  (even  though  the  systee  has  been 
designed  for  that  eaxinue)  it  eay  be  reasonable  to 
consider  that  the  the  cost  of  this  extra 
coeiunications  load  is  distributed  across  all 
sites,  arriving  at  a  cost  differential  for  a 
hypothetical  ARTCC.  At  sone  sites,  the  three  4800 
bps  lines  will  supply  sufficient  capacity  to 
handle  the  DABS  to  ATC  surveillance  data  without 
delay  and  another  surveillance  transmission  line 
will  not  be  required.  At  other,  busier,  sites  the 
standard  lines  will  not  be  sufficient  to  handle 
the  surveillance  without  buffer  delays,  and 
addition  of  another  line  wll  be  reguired. 

Although  up  to  378  aircraft  can  be  handled  in  90 
degrees  for  an  antenna  scan  time  of  12  seconds, 
only  315  aircraft  can  be  handled  in  90  degrees 
with  an  antenna  scan  tine  of  10  seconds.  Loadings 
up  to  these  liiits  can  be  bandied  by  a  sensor 
without  delay  utilizing  the  three  transnission 
lines  specified  in  the  ER. 

However,  because  a  back-to-back  antenna 
arrangement  is  used  to  increase  the  effective  scan 
rate,  data  from  both  front  and  tack  faces  must  be 
sent  to  ATARS.  For  the  site-located  ATABS  this 
means  that  both  the  aircraft  in  the  front  face  and 
those  in  the  rear  face  must  be  counted  when 
determining  the  total  amount  of  data  generated 
while  the  antenna  sweeps  through  90  degrees. 

Under  current  specifications  this  is  not  a  major 
consideration  in  determining  the  effect  of  maximum 
sensor  loading  on  relocating  ATARS  to  the 
facility,  because  the  most  stringent  sensor 
performance  requirement  (400  aircraft  in  90 
degrees)  also  implies  (since  the  maximum  total 
sensor  load  is  400  aircraft)  that  no  additional 
aircraft  can  be  seen  by  the  other  antenna  face. 

If  ATARS  were  implemented  at  the  DABS  site,  cnly 
data  from  the  front  face  (46  thousand  bits)  might 
go  to  ATC.  (Today,  ATC  only  has  available  data 
from  one  antenna  face.  Whether  or  not  a  decision 
would  be  made  in  the  future  to  provide  both 
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streams  of  data  to  ATC  cannot  be  deterained  at 
this  tine.) 


The  general  effect  of  the  back-to-back  antenna  is 
that  the  average  transaission  line  utilization  is 
increased.  For  the  sane  nunber  of  aircraft 
uniformly  distributed  throughout  the  airspace,  the 
transaission  lines  will  be  required  to  carry  twice 
as  aucb  data  as  for  a  single  face  antenna  to  serve 
ATARS  at  the  facility.  Hhile  this  does  not 
influence  the  theoretical  reguireaent  for  nuaber 
of  transmission  lines  (as  long  as  the  bunching 
requirement  is  more  strict)  it  could  be  iaportant 
when  considering  the  nuaber  of  lines  actually  put 
in  service. 

An  exaaple  shown  in  Figure  6-4-1,  illustrates  a 
hypothetical  case  in  which  the  nuaber  of  aircraft 
per  degree  is  the  sane  as  for  400  aircraft  in  90 
degrees.  In  case  A  with  ATARS  located  at  the 
ARTCC  200  aircraft  are  "seen”  by  both  the  front 
face  antenna  and  the  back  face  antenna.  Data  froa 
all  400  aircraft  aust  be  sent  to  air  traffic 
control.  If  each  of  the  45  degree  segaents  takes 
1.25  seconds  to  sweep,  the  total  surveillance 
transaission  line  data  rate  reguired  to  send  the 
data  to  ATARS  without  delay  is  given  by 

data  rate  =  400  aircraft  »  114  bits/aircraft 

1.25  seconds 

data  rate  =  36,480  bits  per  second 

Transaission  of  data  at  this  rate  without  delay  to 
facility-located  ATARS  would  require  eight  4800 
bps  transaission  lines. 

In  case  B,  with  ATABS  located  at  the  DABS  site, 

200  aircraft  are  "seen"  by  each  antenna  face,  and 
data  for  all  400  aircraft  are  sent  to  ATABS,  but, 
following  current  practice,  only  data  for  the  200 
aircraft  in  the  front  face  nay  have  to  be  sent  to 
HAS.  This  reduces  the  data  transaission 
requirement  by  1/2,  yielding  a  data  rate  of  18 
thousand  bits  per  second  requiring  only  four  4800 
bps  transmission  lines  to  transnit  the  data 


200  AIRCRAFT 


200  AIRCRAFT 


FIGURE  B-4-1 

DATA  TRANSMISSION  FOR  BACK-TO-BACK  ANTENNAS 


without  delay,  if  a  saall  delay  were  acceptable 
to  ATC  then  three  4800  bps  Hues  would  suffice. 

Although  it  seees  froa  this  discussion  that  ATABS 
at  the  DABS  site  is  definitely  preferable,  further 
examination  shows  that  purchase  of  the  eight 
transaission  lines  (as  reguired  by  ATABS  at  the 
ATC  facility)  gives  case  A  flexibility  beyond  that 
reguired  by  the  DABS  EB.  Figure  B-4-2  shows  that 
when  all  400  aircraft  are  seen  by  the  front  face 
antenna,  the  eight  transaission  lines  of  case  A 
are  sufficient  to  carry  the  data  to  ATC  without 
delay,  but  in  case  B,  the  four  transaission  lines 
are  insufficient  to  carry  the  large  aaount  of  data 
to  ATC  without  a  small  delay.  (ATABS,  however, 
being  resident  at  the  DABS  site  is  not  subject  to 
this  delay  and  perforns  normally.) 

A  way  of  clarifying  the  situation  is  to  constrain 
the  nuaber  of  liner  to  be  constant,  fixing  the 
cost,  and  to  examine  the  difference  in  performance 
associated  with  the  two  systems.  The  upper  part 
of  Figure  B-4-3  shows  ATABS  at  the  ATC  facility 
connected  to  DABS  by  four  transaission  lines.  In 
the  bottom  part  of  the  figure,  the  ATC  facility  is 
connected  to  the  joint  ATABS/DABS  site  by  four 
lines  also.  Transaission  capacity  for  the  lines 
in  the  upper  example  will  be  completely  saturated 
whenever  more  than  168  aircraft  are  seen  per 
second  by  the  combination  front  and  back  face 
antennas.  In  the  lower  example,  ATABS  at  the  DABS 
site  does  not  experience  communications  delays  at 
all,  and  ATC  communications  are  not  saturated 
until  168  aircraft  per  second  are  seen  by  each  of 
the  front  and  back  face  antennas.  This  means  that 
location  of  ATABS  at  the  ATC  facility  degrades  the 
performance  of  both  the  ATC  facility  and  ATAES  by 
reguiring  transmission  of  both  front  and  tack  face 
data.  ATABS  at  the  DABS  site  is  unaffected  by 
transaission  delay,  and  further  puts  less  demand 
on  the  DABS  to  ATC  lines  by  reguiring  only  data 
froa  the  front  face  to  be  sent  over  the  lines  to 
ATC. 

In  summary,  it  can  be  said  that  under  the  present 
bunching  and  maximum  surveillance  specifications 
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400  AIRCRAFT 
FROST  FACE 


1  ■ 


TO  ATC  8  LINES 
400  AIRCRAFT 


CASE  A:  ATARS  AT  ATC 


EIGHT  LINES  GIVE  38,400  BPS  CAPACITY  TO  TRANSMIT 
DATA  WITHOUT  DELAY 


400  AIRCRAFT 
FRONT  FACE 


ATARS 


TO  ATC  4  LINES 
400  AIRCRAFT 


CASE  B:  ATARS  AT  DABS  SITE 


FOUR  LINES  GIVE  19,200  BPS  CAPACITY,  YIELDING 
A  WORST  CASE  DELAY  OF  ABOUT  1  SECOND 


FIGURE  B-4-2 

SYSTEM  PERFORMANCE  UNDER  BUNCHING 


ATARS  AT  ATC  FACILITY 


168  A/C 
PER  SECOND 
TOTAL 


FIGURE  EM-3 

CONNECTING  TRANSMISSION  LINES  DO  NOT  FORM  A  BOTTLENECK  FOR 

SITE-LOCATED  ATARS 
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for  400  aircraft,  location  of  ATABS  at  tba  ABTCC 
will  increase  the  surveillance  data  trananisaion 
reguireaent  using  4800  bps  voice  grade  lines  by 
6-27*  per  site.  At  current  leased-line  costs 
these  increases  can  be  translated  into  dollars. 


Table  6-4-1  shoes  the  elenents  that  sake  up  the 
total  existing  surveillance  coasunications  costs 
for  the  four  en  route  radars  in  the  Rasbington 
Center.  The  total  aonthly  cost  for  all  four 
radars  is  $3,456.  Using  this  figure  as  a  basis. 
Table  B- 4-2  shows  that  the  increased  charges  will 
be  about  $1,000  per  aontb  if  ATABS  is  implemented 
at  the  ABTCC.  Froa  the  alternative  viewpoint  of 
holding  costs  (nuaber  of  lines)  fixed  and 
measuring  perforaance,  ATABS  at  lcng  range  DABS 
sites,  does  not  suffer  froa  the  transaission 
liaitations  that  could  degrade  the  perforaance  of 
both  ATABS  and  ATC  when  ATABS  is  located  at  the 
ATC  facility. 


B-4.  1. 


lar  Considerations 


Rith  scae  differences,  the  transaission 
considerations  aentioned  with  regard  to  en  route 
radars  also  apply  to  terainal  radars.  Here, 
however,  the  distance  froa  radar  head  to  ATC 
facility  is  anch  shorter,  typically  less  than  five 
miles.  The  radar  to  facility  communications  link 
in  current  operations  uses  FAA-ovned  low  loss 
coaxial  transaission  lines  such  as  BG216/U  run 
through  underground  conduits  on  airport  property. 


Terainal  radars  rotate  much  faster  than  en  route 
radars,  with  a  scan  time  generally  between  4-4.7 
seconds.  For  worst  case  loading  of  400  aircraft 
in  90  degrees  (with  a  radar  rotation  rate  of  15 
rpa)  45,600  bits  of  data  are  generated.  This 
results  in  a  data  generation  rate  of  45,600  bits 
per  second.  Transaission  of  this  data  to  ATABS  at 
the  ATC  facility  without  delay  would  reguire  ten 
4800  bps  transmission  lines,  while  transaission  of 
the  45,600  bits  to  ATC  (with  some  delay)  can  be 
accomplished  by  three  4800  bps  voice  grade  lines 
similar  to  those  leased  from  the  telephone  company 
for  long  range  radar  use.  One  particularly  costly 
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TABLE  B-4-1 


MONTHLY  TELECOMMUNICATIONS  COST  ESTIMATES  FOR  4  ARSR  RADARS 


EQUIPMENT  COSTS 
One  Time  Fixed  Costs 

Station  Terminal  Installation  $100 

Purchase  of  Modems  (4800  BPS)  (2)  9600 

Sub  Total:  Fixed  Costs  $10,608 

Amortized  Over  240  Months  45 

Recurring  Monthly  Charges 

Station  Terminal  Rental  (2)  50 

Cl  Conditioning  5 

Sub  Total:  Recurring  Charges  55 

Total  Per-Circuit  Monthly  Costs  $100 

Not  Including  Line  Charges 

Cost  for  4-3  Circuit  Lines  $1200 


Line  Charges  (Per  4800  bps  Circuit,  Per  Month) 


Line  1: 

Leesburg  to  Suitland  ARSR 

40  Miles 

108 

Line  2: 

Leesburg  to  Roanoke  ARSR 

162  Miles 

201 

Line  3: 

Leesburg  to  Raleigh  ARSR 

270  Miles 

248 

Line  4: 

Leesburg  to  Cape  Charles  ARSR 

151  Miles 

$195 

Subtotal 

:  Cost  for  Single  Circuits 

:  Cost  for  3  Circuit  Lines 

$752 

2,256 

TOTAL: 

SUM  OF  MONTHLY  EQUIPMENT  AND  LINE  CHARGES 
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$3,456 

TABLE  B-4-2 


SURVEILLANCE  RELATED  DATA  TRANSMISSION  COSTS 


PER  SITE 

DABS-LOCATED 

ATARS 

ATC-LOCATED 

ATARS 

Maximum  No.  Aircraft 

400 

400 

Bunching  in  90° 

400 

400 

Bits  Generated  in  1/4  Scan 

40,040 

40,040 

Total  Bits  Transmitted 

45,760 

45,760 

Time  to  Transmit  Data  to  ARTCC 

10  Sec 

2.5  Sec 

No.  of  4800  BPS  Lines  Required 
(3  are  standard) 

1 

4 

%  Increase  Above  Standard  Data 
Transmission  Rate 

0% 

27% 

COST  INCREMENTS 

Monthly  Cost  (4  ARSRs  Supporting 
Washington  Center) 

(Based  on  27%  Increase  In  Number 
of  Lines  Above  Standard) 

$0 

$933* 

Monthly  Cost  (4  ARSRs  Supporting 

$0 

$1152* 

Washington  Center) 

(Based  on  33. 3%  Increase  in  Number 
of  Lines  Above  Standard) 


*  COSTS  CALCULATED  USING  TELCO  TARIFF  NO.  260. 
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item  associated  with  use  of  lines  of  this  type  is 
the  nodens  necessary  for  transmission  of  digital 
data.  One  noden  is  required  on  each  end  of  each 
data  line,  so  that  the  baseline  case  enploys  six 
4800  bps  nodens  available  coanercially  at  a  cost 
of  about  $1  per  bps  (Beference  3)  for  a  total  cost 
of  about  129,000.  The  ten  lines  required  for 
ATARS  at  the  ATC  facility  would  use  20  nodens 
costing  approxinatly  $96  thousand  for  an  increased 
cost  of  $67  thousand  per  site  over  ATABS  at  the 
DABS  site.  Added  to  this  would  be  facility 
dependent  costs  of  purchase  and  installation  of 
the  seven  additional  lines. 

These  per  site  costs  are  quite  high.  Fortunately 
another  alternative,  using  the  existing  BG216/0 
coaxial  lines  is  available  for  providing 
surveillance  coaaunications.  These  lines, 
presently  used  for  radar  video  transaissions,  have 
a  very  vide  bandwidth  capable  of  supporting  rapid 
digital  data  connunications.  As  with  all  coaxial 
cable,  transnission  line  losses  are  a  najor 
consideration.  However,  the  BG216/0  is  a  low  loss 
type  of  coaxial  cable  having  an  attenuation  of 
about  .1  db  per  100  feet  when  operating  at  the 
required  data  transnission  rate  (about  100  ac) . 
With  a  transnission  length  of  five  niles  (26,400 
feet)  the  total  loss  in  the  line  would  be  26.4  db, 
yelding  an  output  signal  strength  of  approxinately 
1/S00th  of  the  input  power.  This  is  quite  snail 
and  nay  require  anplif ication.  However,  for  an 
installation  such  as  lashington  Rational  Airport 
where  the  radar  is  only  1/2  nile  away,  the  loss  is 
only  2.64  db,  representing  an  acceptable  power  in 
to  power  out  ratio  of  1.84.  Coanercially 
available  56,000  bps  nodens  specially  designed  for 
use  with  coaxial  cable  could  be  connected  to  each 
end  of  the  line  at  a  cost  of  $6500  each. 

Ose  of  existing  coaxial  lines  that  will  no  longer 
be  needed  for  video  transnission  with  introduction 
of  DABS  represents  an  attractive  alternative  to 
installation  of  audio  type  digital  data  cables. 

At  new  installations,  of  course,  higher  cost  would 
be  associated  with  providing  the  better  guality 
video  line  rather  than  less  expensive  audio  type 
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lines. 


Ose  of  a  coaxial  transmission  line  would  supply 
sufficient  capacity  for  increased  nunbers  of 
aircraft.  The  bandwidth  of  these  lines  is  so 
large  that  their  use  is  effectively  United  by  the 
nodens  and  conputer  processing  capability  rather 
than  the  line  itself. 

Advantages  and  disadvantages  associated  with  use 
of  the  back-to-back  antenna,  of  course,  do  not 
apply  to  terninal  ATABS  which  uses  only  a  front 
face  antenna.  Sinilarly,  use  of  coaxial 
transmission  lines  in  the  en  route  surveillance 
system  would  be  unlikely  due  to  high  losses  and 
costs  over  the  distances  involved.  Although  some 
advantages  of  large  bandwidth  transmission  for 
long  distances  could  be  obtained  through  the  use 
of  microwave  transmission,  this  is  inconsistent 
with  current  PAA  policy  and  was  not  investigated. 

B-4. 2 _ Equipment  Costs 

In  addition  to  the  cost  of  communications  lines 
for  surveillance  transmission  there  are  some 
differential  costs  for  equipment  associated  with 
facility-located  ATAFS.  These  derive  from 
duplication  and  loss  of  economics  of  scale  in  the 
purchase  of  two  separate  components  rather  than  a 
single  unified  DABS/ATAFS  complex. 

In  determining  appropriate  costs  of  duplication 
some  attempt  has  been  made  to  predict  to  a  certain 
extent  exactly  what  type  of  equipment  would  be 
associated  with  a  production  model  A1ABS.  The 
current  engineering  models,  for  example,  require 
ten  cabinets  for  component  mounting.  Rith 
development  and  use  of  specially  designed  circuit 
boards  rather  than  the  standard  commercial  boards 
now  used,  less  space  would  be  taken  up  inside  each 
cabinet.  The  total  size  could  be  reduced 
considerably,  probably  by  a  factor  of  1/2.  The 
conputer  complex  now  requiring  several  cabinets 
could  be  reduced  to  a  single  cabinet.  Ose  of 
larger  increments  of  conputer  memory  and 
specialized  conputer  boards  would  also  contribute 
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to  a  redaction  in  power  requirements,  reducing 
cost  and  space  requirements  for  power  supplies. 
Finally,  specialized  connunications  equipsent 
designed  for  test  and  evaluation  would  not  be 
required. 

Each  cabinet  of  the  engineering  nodel  coeplez  has 
its  own  five  volt  power  supplies.  The  nodel  used 
is  a  regulated  150  anp  LH  Besearch  nodel  HB301 
OP/115  derated  to  100  amps  by  the  contractor. 

Three  supplies  are  conbined  for  reliability,  in 
such  a  nanner  that  failure  of  a  single  supply  will 
not  cause  failure  of  the  complex.  The  power 
supply  is  connercially  available  fron  LB  Besearch 
at  a  cost  of  $625  with  reductions  for  quantity 
purchases,  i  reduction  in  the  size  of  the 
conputer  conplez  hardware  of  29$  could  result  in  a 
reduction  of  the  power  supplies  currently  used  to 
power  the  conputers  by  a  sinilar  anount.  If  this 
were  the  case,  high  reliability  could  be 
naintained  by  substituting  snaller  100  anp  units 
for  the  150  anp  units  now  used  at  the  CAES  site. 
The  power  to  run  the  ATABS  conputers  could  be 
supplied  by  three,  50  anp  units  located  at  the  ATC 
facility.  These  are  currently  available  fron  LH 
research  for  $540  and  $380  respectively.  As  can 
be  seen,  a  conbination  of  snaller  power  supplies 
would  cost  nore  than  a  single,  larger  power 
supply. 

The  nost  costly  duplication  of  equipnent  occurs 
with  computer  conponents.  In  the  engineering 
nodel  three  conputers  are  provided  to  handle  all 
external  connunications  with  ATC  and  other 
sensors.  These  conputers  are  responsible  for 
receiving  requests  and  acknowledgements  fron  other 
sensors  and  for  nanaging  inter-sensor  and 
surveillance  connunications.  An  increase  in  the 
rate  at  which  surveillance  data  is  sent  would  put 
a  further  load  on  these  conputers.  Moreover,  with 
ATABS  located  at  ATC  facilities,  additional 
conputers  would  be  required  to  receive  the 
surveillance  data  sent  fron  the  CABS  site, 
supplying  a  copy  to  ATABS  and  forwarding  a  copy  to 
the  ATC  conputer. 
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This  task  could  be  performed  by  existing  1ETS  or 
NAS  computers,  but  should  not  be  because  of 
reliability  considerations.  The  computers 
distributing  the  DABS  data  must  be  made  especially 
reliable,  as  they  form  a  reliability  bottleneck 
for  both  the  DABS/ATABS  system  and  traditional  air 
traffic  control. 

Each  computer  in  the  engineering  model  is  composed 
of  four  computer  boards  including  two  two-sided 
CPO  boards,  one  ten-layer,  CPO-voter  board  and  one 
eight- layer  Bi  Polar  Memory  board.  The  CPO  boards 
are  available  now  at  a  commercial  cost  of  $1000 
each.  The  voter  boards  and  memory  boards  each 
holding  approximately  250  integrated  circuits,  are 
not  currently  available  but  were  constructed 
specifically  for  DABS.  The  cost  of  a  production 
model  board  performing  the  sane  functions  but 
reduced  in  size  is  estimated  to  be  at  least  as 
much  as  the  CPO  board.  The  total  cost,  then,  of  a 
single  DABS  voting  computer  would  be  about  $4000. 
If  three  additional  computers  were  required  at  the 
receiving  end  as  well  as  the  original  three  at  the 
sending  end,  the  $12,000  cost  of  these  extra 
computers  would  be  attributable  to  the  cost  of 
ATARS  at  the  ATC  facility. 

Overall,  the  costs  in  this  section  have  been  based 
on  commercially  available  components  applied  in 
construction  of  the  engineering  model  CABS.  While 
a  general  cost  reduction  could  be  expected  for 
production  models,  the  trends  behind  the  cost 
differences  would  continue  to  hold  true.  That  is, 
a  production  model  DABS  based  on  the  current 
engineering  model  concept  would  probably  contain 
specially  designed  voting  computer  systems 
arranged  on  a  single  board,  memory  in  the  largest 
available  quantities,  and  smaller  power  supplies. 
This  would  tend  to  reduce  the  overall  cost  of  a 
production  model  from  that  indicated  here,  while 
maintaining  a  lower  overall  equipment  cost  for 
ATARS  at  DABS  sites. 


technically  possible,  duplication  of  egaipaent, 
loss  of  economies  of  scale  and  increased 
coanunications  result  in  higher  costs  for  ATABS  at 
ATC  facilities.  For  a  terminal  site  the  increased 
costs  include  $13,000  for  conpoter  hardware.  Host 
of  this  is  due  to  additional  computers  to  handle 
and  distribute  the  incoming  DABS  surveillance 
data,  with  cabinets  and  power  supplies  Baking  a 
smaller  contribution.  Increased  costs  for  the 
nodens  would  range  froa  $67,000  per  site  for 
purchase  of  voice  grade  aodeas  to  $13,000  for 
purchase  of  special  high  bit  rate  aodeas  designed 
for  use  with  coaxial  cable.  Cable  costs, 
maintenance  and  installation  are  extra. 

For  en  route  sites,  the  hardware  costs  would  be 
the  same,  but  the  coanunications  costs  would  vary 
between  an  increase  of  33X  and  an  increase  of  OX 
depending  on  the  load  of  the  sensor.  For  the 
Washington  center  a  33X  increase  aaounts  to  about 
a  total  $12,000  per  year  for  all  four  radars. 
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1.  This  study  has  concluded  that  it  would  be 
technically  feasible  to  provide  ATABS  service 
fron  either  the  DABS  sites  or  the  ATC 
facilities.  There  are  sone  advantages  to 
either  alternative.  However,  location  at  the 
DABS  site  is  preferred  priaarily  because 
ATABS  is  not  then  subjected  to  additional 
queuing  and  transmission  delays  in  receiving 
surveillance  data  or  sending  uplink  messages. 
Factors  strongly  influencing  the  location 
decision  are  transnission  and  hardware  costs. 

2.  ATABS  ispleaented  at  the  DAES  site 
provides  a  backup  protection  capability  in 
event  of  catastrophic  failure  of  the  ATC 
facility,  that  cannot  be  effectively  latched 
by  ATABS  iipleiented  at  the  ATC  facility. 

3.  location  of  ATABS  at  the  ATC  facility 
( ABTCC  or  tower)  does  not  significantly 
reduce  the  aiount  of  hardware  or  software  at 
the  radar  site  since  ATABS  comprises  only  25% 
of  the  total  DABS  software  and  an  even 
sialler  percentage  of  the  total  hardware. 

4.  Transnission  of  rapidly  generated 
surveillance  data  to  ATABS  located  in  tower 
equipment  rooms  using  standard  voice  grade 
lines  would  require  ten  4800  bps  transmission 
lines  to  insure  that  no  additional  delays  are 
added  to  ATABS  while  fulfilling  the  DABS  EB 
requirement  for  processing  400  aircraft  in  90 
degrees.  This  is  seven  more  lines  than 
currently  specified  in  the  DABS  EB.  For 
terminal  sites  designed  to  handle  the 
specified  400  aircraft,  the  increase  in 
capital  cost  to  support  the  seven  additional 
transnission  lines  would  exceed  160  thousand 
per  site. 

5.  Ose  of  very  high  data  rates  and  low  loss 
coaxial  cable  at  sone  existing  terminal  sites 
could  reduce  the  incremental  cost  of 
transmitting  surveillance  data  to  facility- 
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located  ATABS  to  $13,000  per  site* 

6.  Depending  on  the  rotation  rate  of  the 
long  range  radar  antenna  (10-12  sec.) 
location  of  ATABS  at  the  ABTCC  rather  than  at 
the  DABS  site  will  increase  the  deaand  on 
leased  transmission  lines  by  a  ainiaua  of 
6-27$.  This  increase  is  incurred  in  aeeting 
the  DABS  EB  reguireaent  for  processing  a 
total  of  400  aircraft  (all  located  in  a  90 
degree  sector)  without  data  tiansaission 
delays  unacceptable  to  ATABS.  If  all  sites 
were  equipped  to  handle  400  aircraft,  the 
cost  to  the  FAA  would  increase  by  a  factor  of 
1/3  through  the  provision  of  4  rather  than  3 
surveillance  transmission  lines.  This  would 
be  a  total  increase  of  approximately  $1,000 
per  month  for  leased  surveillance  lines  for  4 
radars  serving  the  Washington  center. 

7.  The  need  for  ATABS  to  have  a  rapid  data 
rate  from  front  and  back  antennas  increases 
average  line  utilization  from  long  range 
radar  sites.  Location  of  ATABS  at  the  CABS 
site  would  lower  average  line  utilization 
(compared  to  ATABS  at  the  ABTCC)  for  ABTCC's 
requiring  only  front  face  surveillance  data. 


8HII1KIS 


1.  "Discrete  Address  Beacon  Systen  (DIBS)  Sensor", 
Federal  Aviation  Administration,  F1A-IB-240-26,  July, 
1974. 

2.  McFarland,  A.  L, ,  Patel,  K.  B. ,  Boberts,  D.  L., 
"Multi-Site  Intermittent  Positive  Control  Algorithms 
for  the  Discrete  Address  Beacon  Systen",  The  BITBE 
Corporation,  McLean,  ¥A,  FAA-BH-74-4,  Change  2,  Hay, 
1976. 

3.  Golden,  J.  F. ,  "Multi-Site  Communications  Methods 
for  DABS-IPC",  The  HITB1  Corporation,  McLean,  VI, 
HTB-7467,  December,  1977. 

4.  "Air  Navigation  £  Air  Traffic  Control  Facility 
Performance  and  Availability",  FAA,  BIS:  SH6040-20, 
September,  1977. 


APPENDIX  C 

DEVELOPMENT  OF  AN  INTERFACE  BETWEEN 
ATARS  AND  BCAS 

C.  F.  Swett 


Since  the  Automatic  Traffic  Advisory  and 
Resolution  Service  (ATABS)  (References  1  and  2) 
and  Beacon  Collision  Avoidance  Systea  (BCAS) 
(References  3  and  4)  both  forn  a  part  of  the 
integrated  separation  assurance  systea,  an 
interface  between  then  nust  be  provided  which  will 
enable  the  two  systens  to  operate  in  a  cooperative 
Banner.  The  purpose  of  this  appendix  is  to 
describe  the  concept  for  the  necessary  interface, 
to  present  conputer  decision  logic  which  defines 
it  in  detail,  and  to  identify  the  changes  reguired 
to  existing  systens  to  inplenent  the  interface. 

C- 1 .  ii _ The  ATARS  and  BCAS  Systens  Onder  Study 

The  ATARS  systen  to  be  interfaced  with  BCAS  is 
described  in  Reference  2.  This  interface  study 
was  originally  conducted  to  provide  an  interface 
between  ATARS  and  the  BCAS  represented  by 
Reference  3.  This  BCAS  operates  in  several 
different  nodes.  Bhenever  a  sufficient  nunber  of 
ground  sensors  is  available,  ECAS  is  able  to 
obtain  full,  accurate  surveillance  on  intruders 
and  can  issue  either  horizontal  or  vertical 
resolution  advisories.  The  BCAS  obtains 
surveillance  in  a  passive  node  whenever  possible 
i.e. ,  the  BCAS  listens  to  the  replies  of  intruders 
to  ground  interrogations,  but  nakes  no 
interrogations  of  its  own.  In  sone  situations, 
BCAS  nust  augnent  the  passive  surveillance  with 
its  own  active  interrogations,  in  order  to  obtain 
accurate  surveillance  on  intruders.  In  cases 
where  the  BCAS  is  not  in  view  of  any  ground 
sensors,  it  receives  surveillance  only  froa  its 
own  active  interrogations.  This  data  is  not 
suitable  for  issuing  horizontal  resolution 
advisories.  The  interface  developed  during  this 
study  was  designed  to  operate  correctly, 
regardless  of  the  node  of  surveillance  being  used 
by  BCAS. 

The  Federal  Aviation  Adninistration  (FAA)  is  also 
investigating  the  capabilities  of  a  BCAS  that 
operates  only  in  the  active  surveillance  node. 


This  is  referred  to  as  the  active  BC1S.  The 
active  BCAS  currently  being  studied  has  evolved 
froa  that  described  in  Beferences  4  and  5. 

Vhether  the  FAi  *i 11  pernit  one  or  both  of  these 
systeas  to  be  iepleeented  has  not  yet  been 
determined.  Even  though  the  interface  developed 
in  this  study  was  not  developed  explicitly  for  the 
active  BCAS,  it  can  be  used  to  provide  the  sane 
level  of  interface  capability  between  this  version 
and  ATARS  as  for  the  full-capability  BC1S. 

However,  since  the  active  BCAS  is  linited  to  the 
use  of  vertical  resolution,  it  nay  not  be  able  to 
use  the  coordination  infornation  in  aultiaircraft 
situations  as  effectively  as  the  full-capability 
BCAS.  By  using  the  sane  interface  logic  with  the 
active  BCAS  as  with  the  full-capability  BCAS,  a 
consistent  operation  would  be  ensured  in  the  case 
where  both  versions  of  BCAS  were  iapleaented 
operationally. 

CrJUj _ £egairejeats_gj_the_ATAESrBCAS_Intexfasg 

A  study  of  design  alternatives  for  an  ATABS-ECAS 
interface  was  conducted  as  a  first  step  in  the 
developnent  of  the  interface.  This  study  revealed 
a  nuaber  of  probleas  in  creating  an  effective 
■echanisn  for  dynanically  assigning  separation 
assurance  responsibilities.  Three  key  technical 
probleas  to  be  considered  were:  1)  providing 
protection  against  pop-up  intruders  (those  which 
enter  surveillance  coverage  froa  beneath  the 
coverage  floor  and  cause  an  iaaediate  collision 
threat),  2)  providing  coherent  resolution  of 
aultiaircraft  encounters,  and  3)  providing 
continuous  and  coordinated  resolution  when 
conflicts  arise  as  aircraft  are  crossing  the 
boundaries  between  areas  of  ATABS  and  ECAS 
responsibility.  Unfortunately,  neither  the 
frequency  nor  the  iaportance  of  these  probleas 
could  be  quantified  in  operational  terns. 


It  was  found  that  each  problea  could  be  solved  by 
augnenting  the  interface  design  with  a  new 
feature,  involving  a  certain  aaount  of  additional 
conplexity  in  the  logic  or  in  the  reguired 
connunications.  In  reviewing  possible  design 


alternatives,  the  Aircraft  Separation  Assurance 
Task  Force  sade  certain  decisions  as  to  the 
desirability  of  various  interface  characteristics* 
The  design  presented  in  this  appendix  is 
responsive  to  the  reguiresents  that  the  Task  Force 
felt  were  necessary.  These  reguiresents  are 
discussed  below. 

The  first  reguireaent  is  that  ATARS  should  be  the 
systea  responsible  for  providing  separation 
assurance  service,  wherever  such  service  can  be 
provided  by  ATARS.  This  reguireaent  would  be 
fairly  easy  to  achieve,  by  siaply  having  the  BCAS 
equipaent  inhibit  generation  of  resolution 
advisories  whenever  the  BCAS-equipped  aircraft  is 
receiving  service  froa  ATAGS.  However,  another 
reguireaent  that  was  iaposed  upon  the  ATABS-BCAS 
interface  was  that  BCAS,  when  within  ATARS 
coverage,  should  provide  protection  against  "pop¬ 
up"  intruders  not  visible  to  ATARS.  This 
situation  occurs,  for  exaaple,  when  an  aircraft 
beneath  the  floor  of  coverage  of  the  Discrete 
Address  Beacon  Systea  (DABS)  is  in  danger  of 
colliding  with  a  BCAS-eguipped  aircraft  within 
DABS  coverage,  but  operating  close  to  the  coverage 
floor.  It  is  further  reguired  that  BCAS-generated 
resolution  advisories  against  pop-up  intruders  be 
transaitted  to  the  ATARS  ground  systea  so  that 
they  can  be  used  as  constraints  in  any  further 
actions  that  ATARS  night  take  in  this  conflict. 
Because  of  this  reguireaent  that  BCAS  protect 
against  pop-up  intruders,  a  siaple  interface,  that 
causes  BCAS  advisories  to  be  inhibited  whenever 
the  BCAS  aircraft  is  within  ATARS  coverage,  cannot 
be  used. 

Additional  reguireaents  of  the  interface  relate  to 
the  logical  consistency  of  the  advisories  issued 
to  the  aircraft.  Duplication  of  advisories  should 
be  avoided.  That  is,  ATABS  and  BCAS  should  not 
both  issue  advisories  to  a  given  aircraft  to 
protect  it  against  the  sane  intruder.  However, 
ATARS  is  pernitted  to  issue  an  advisory  to  a 
particular  aircraft  to  protect  it  against  one 
intruder,  while  BCAS  issues  an  advisory  to  protect 
it  against  another  intruder.  Rhen  this  happens. 
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the  resolution  advisories  issued  to  that  aircraft 
by  both  ATABS  and  ECAS  sust  be  cospatible.  One 
sust  not  issue  a  Cliab  while  the  other  issues  a 
Descend.  Furthernore,  all  aircraft  in  a 
aultiaircraf t  encounter  should  receive  autually 
consistent  advisories,  so  that  the  hazard  is  not 
worsened  by  the  advisories. 

The  advisories  that  result  froa  this  interface 
should  have  continuity.  That  is,  once  an  advisory 
has  been  issued  to  protect  an  aircraft  against  a 
particular  intruder,  that  advisory  should  not 
change  because  responsibility  has  been  handed  off 
froa  one  system  to  another  or  because  a  new 
intruder  has  become  involved  in  the  conflict. 

A  further  requirement  of  the  interface  is  that  it 
provide  unambiguous  coordination  between  the 
separation  assurance  systea  eleaents  in  the  case 
of  multiaircraft  encounters.  This  reguireaent 
aust  be  met  for  multiaircraft  encounters  involving 
all  combinations  of  eguipage  and  coverage.  A 
single  aircraft  may  be  equipped  with  ATABS,  with 
BCAS ,  or  with  only  an  altitude  reporting  DABS  or 
Air  Traffic  Control  Badar  Beacon  System  (ATCBES) 
transponder.  The  aircraft  aay  be  within  or 
outside  ATABS  coverage  and  aay  be  observed  only  by 
ATABS,  or  only  by  BCAS,  or  by  both  systems. 

Two  additional  reguired  properties  of  the 
interface  are  that  the  interface  be  resilient  to 
transient  comaunications  losses  and  that  ainiaua 
additional  tine  delay  in  the  pilot's  receiving 
advisories  be  introduced  due  to  coordination.  For 
example,  the  coordination  process  Bust  not  fail 
because  the  DABS  sensor  has  lost  contact  with  an 
aircraft  for  one  or  two  scans  due  to  a  fade.  The 
reguireaent  for  ainiaizing  the  delay  in  displaying 
the  advisories  Beans  that  coordination  cannot  be 
pernitted  to  take  place  over  a  period  of  several 
radar  scans. 

The  interface  should  perait  the  ECAS  equipment  to 
acquire  surveillance  data  within  ATABS  service 
areas,  at  the  most  complete  level  possible  without 
creating  unacceptable  interference  with  the  ATCBBS 


and  DIBS  surveillance  systeas.  Even  though  the 
BCAS  eguipaent  will  inhibit  ECAS-generated 
advisories,  a  full  capability  BCAS  will  have 
tracks  for  all  intruders  so  that  ianediate  BCAS 
protection  can  be  provided  in  event  of  failure  of 
the  DABS  sensor. 

One  last  reguireaent  is  that  the  interface  provide 
a  aechanisa  for  the  coordination  of  traffic 
advisory  aessages  as  well  as  for  resolution 
advisory  aessages.  ATABS  and  BCAS  should  not  be 
peraitted  to  display  to  a  particular  aircraft 
duplicate  traffic  advisory  aessages  regarding  the 
sane  intruder. 

C- 1. 3 _ Assuantions 

Two  assuaptions  related  to  avionics  eguipage  were 
aade  in  this  study.  One  is  that  an  aircraft 
eguipped  with  BCAS  will  also  be  eguipped  with  a 
DABS  transponder.  Nhether  the  DABS  transponder  is 
a  separate  device  or  the  DABS  capability  is 
incorporated  within  the  BCAS  eguipaent  is 
iaaaterial.  The  other  assunption  is  that  an 
aircraft  eguipped  with  a  DABS  transponder  does  not 
necessarily  have  an  ATABS  display  or  BCAS 
capability. 

Another  assunption  is  that  ATABS  and  BCAS 
multiaircraft  collision  avoidance  logic  exists,  or 
can  be  created.  Mo  aultiaircraf t  resolution  logic 
was  developed  during  this  study.  It  was  found 
that  it  was  not  necessary  to  know  what  the 
aultiaircraf t  logic  was  in  order  to  develop  the 
interface.  The  interface  logic  provides  for 
coaaunication  of  all  necessary  conflict  resolution 
inforaation  between  aircraft  or  between  aircraft 
and  the  ATABS  systen  on  the  ground. 

C- 1 . 4 _ Outline  of  the  Beaaining  Text 

In  the  following  section,  the  interface  is 
described  in  terns  of  actions  that  occur  when 
ATABS  and/or  BCAS  detects  a  conflict  between 
aircraft  at  the  boundary  between  the  ATAFS  and 
BCAS  service  zones.  It  will  be  shown  how  rapid 


and  unambiguous  designation  of  system 
responsibility  can  be  achieved  through 
communication  of  conflict  information  from 
aircraft  to  aircraft  and  from  aircraft  to  the 
ground.  It  will  also  be  demonstrated  that 
multiaircraft  encounters  can  he  coordinated  by 
successive  pairwise  applications  of  the 
coordination  logic.  The  information  contained  in 
ground-to-air,  air-to-air  and  air-to-ground 
coordination  messages  will  be  described.  The 
logic  and  the  sets  of  messages  represent  a  single 
capability  which  provides  for  1)  ATARS  resolution 
of  conflicts  which  are  wholly  within  ATARS 
coverage,  2)  a  coherent  resolution  of  conflicts  at 
the  boundary  of  ATARS  coverage,  and  3)  a 
coordination  mechanism  for  use  in  ECAS-to-ECAS 
encounters  which  occur  outside  of  ATARS  coverage. 

Next,  the  computer  decision  logic  and  the  contents 
of  messages  needed  to  realize  the  interface  are 
presented  and  discussed  in  detail.  A  set  of 
conflict  information,  which  is  the  focus  of  all 
system  responsibility  transactions,  is  described 
as  well  as  a  function  which  oversees  and  controls 
its  activity.  Finally,  the  ramifications  of 
adopting  this  interface  upon  current  designs  are 
identified. 

C- 1. 5 _ Status  of  the  Interface  Logic 

Although  every  attempt  was  made  to  verify 
correctness  of  the  logic  as  it  was  developed,  time 
was  not  available  to  analyze  its  operation  in 
every  conceivable  situation.  There  is  a  very 
large  number  of  possible  combinations  of  eguipage, 
ATARS  coverage  at  the  beginning  of  the  conflict, 
coverage  transitions  during  the  conflict,  seguence 
of  coordination  messages  being  sent,  signal  fades, 
etc. ,  even  for  a  three  aircraft  encounter  Since 
exhaustive  testing  was  not  performed,  the  material 
presented  in  this  appendix  should  be  considered  a 
first  design  and  not  a  final  verified  algorithm 
specification. 
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In  this  section,  the  basic  aechanises  of  the 
interface's  operation  will  be  described,  both  in 
general  and  using  specific  examples.  The  nature 
of  a  collection  of  conflict  inforaation,  central 
to  the  functioning  of  the  interface,  will  also  be 
discussed.  Presentation  of  detailed  decision 
logic,  which  utilizes  this  inforaation  and 
initiates  and  responds  to  special  coordination 
nessages,  is  deferred  to  the  following  section. 

C-2.  1 _ ATABS  and  BCAS  Service  gones 

The  boundaries  that  deteraine  where  ATABS  and  BCAS 
service  are  provided  are  shown  in  Figure  C-2- 1 . 

The  first  boundary  that  is  discussed  is  the  ATABS 
service  zone  boundary.  At  the  DABS  coverage 
floor,  ATABS  service  is  not  deliberately 
terminated.  ATABS  provides  service  for  all 
aircraft  that  are  visible  to  it.  However,  a 
service  zone  boundary  is  aaintained  by  ATABS  in 
range.  Aircraft  are  not  tracked  beyond  this  range 
boundary.  The  location  of  this  range  boundary  is 
deternined  by  the  aultisite  configuration  or  by 
the  maximum  service  range  of  ATABS  discussed  in 
Appendix  A.  Whenever  an  aircraft  is  within  the 
ATABS  service  zone  of  a  particular  site,  that  site 
will  uplink  its  site  ID  each  scan,  indicating  that 
it  is  providing  ATABS  service  to  that  aircraft 
(see  Section  C-2. 2). 


ATABS  maintains  a  second  boundary  in  its  memory 
which  determines  when  a  BCAS  aircraft  is  permitted 
to  make  routine  active  interrogations  in  order  to 
provide  protection  against  threats  outside  the 
ATABS  service  zone.  The  height  of  the  floor  of 
this  boundary  is  established  sufficiently  above 
the  DABS  coverage  floor  so  that  BCAS  would  be  able 
to  provide  protection  against  any  aircraft 
climbing  at  reasonable  rates  from  below  the 
coverage  floor.  Likewise,  the  position  of  the 
BCAS  active  interrogation  boundary  in  range  is 
established  so  that  BCAS  could  protect  against 
threats  with  reasonable  speeds  approaching  from 
beyond  the  ATABS  service  zone  range  boundary.  If 
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the  ATARS  service  zone  range  boundary  is  at  a 
boundary  shared  with  an  adjacent  site,  the  BCAS 
will  not  be  permitted  to  lake  routine  active 
interrogations  in  this  area. 

ihen  a  BCAS  or  a  DABS-eguipped  aircraft  is  inside 
the  boundary  for  BCAS  interrogation  in  the  active 
mode,  the  ATARS  site  will  uplink  a  lockout  bit  in 
every  surveillance  interrogation.  This  tit  will 
cause  the  BCAS  to  cease  aaking  routine  active 
interrogations.  It  will  also  cause  either  a  ECAS 
or  a  DABS-eguipped  aircraft  to  cease  Baking 
routine  sguitter  transmissions.  A  sguitter 
transmission  is  a  message  sent  out  periodically 
and  spontaneously  by  the  DAES  trnasponder  without 
being  elicited  by  an  interrogation.  It  is  used  to 
permit  ECAS  to  acguire  new  intruders  in  the  active 
mode.  If  the  DABS  transponder  fails  tc  receive 
interrogations  from  the  ground  with  the  lockout 
bit  set,  it  will  automatically  unlock  after  a 
specified  period  of  tine  and  will  start  issuing 
sguitter  transmissions.  In  the  sane  way,  a  BCAS 
aircraft  will  automatically  unlock  and  will  begin 
making  active  interrogations. 

The  ECAS  active  interrogation  lockout  applies  to 
routine  active  interrogations.  It  does  not 
prohibit  the  full  capability  ECAS  from  making 
active  interrogations  to  resolve  certain  ambiguous 
geometries  that  arise  in  the  passive  modes.  If 
interference  to  normal  ground  ATCRBS  or  EABS 
surveillance  were  to  result  from  routine  BCAS 
active  interrogations,  then  BCAS  would  be  locked 
out  to  active  interrogations  at  boundaries  that 
were  as  close  to  the  ATARS  service  zone  boundaries 
as  possible.  However,  where  interference  would 
not  be  a  problem,  the  boundaries  could  be  set  so 
that  active  interrogation  would  be  permitted  in 
more  airspace.  This  would  permit  an  active  ECAS 
to  maintain  ttacks,  even  though  ATARS  had 
separation  assurance  responsibility,  so  that  the 
BCAS  could  provide  protection  immediately  if  the 
DAES  sensor  were  tc  fail. 

The  active  interrogation  lockout  boundary  also 
becomes  a  boundary  at  which  the  ECAS  eguipment 


ceases  to  conduct  coordination  interrogations. 
Inside  this  boundary,  the  ECAS  equipment  nay  track 
aircraft  in  the  passive  node,  but  it  will  inhibit 
the  display  of  ECAS  resolution  advisories, 
regardless  of  the  conditions  applying  to  a  threat 
aircraft.  All  protection  will  be  provided  by 
ATARS.  Outside  this  boundary,  the  BCAS  uses 
coordination  interrogations  to  determine  the 
conditions  affecting  a  threat  aircraft.  Then 
either  ATARS  or  BCAS  accepts  responsibility 
depending  upon  whether  the  threat  is  seen  by  ATARS 
or  is  a  pop-up  threat. 

C- 2. 2 _ The  Conflict  Indicator  Register _ (CIR) 

It  is  convenient  at  this  point  to  introduce  the 
set  of  information  which  is  the  central  repository 
of  responsibility  information.  It  is  called  the 
Conflict  Indicator  Register  (CIR).  A  CIR  is 
located  in  every  aircraft  containing  an  ATARS  or 
BCAS  display.  An  aircraft  equipped  only  with  an 
ATCPBS  transponder  will  not  have  a  CIR.  The  CIR 
is  not  a  special  piece  of  hardware  but  is  embedded 
within  the  logic  associated  with  the  ATARS  or  BCAS 
display.  The  meanings  of  the  proposed  CIR  bits 
and  bit  fields  are  now  addressed.  See  Figure 
C-2-2  for  a  depiction  of  the  CIR. 

One  ATARS  service  bit  (the  A  bit)  and  one  site  ID 
field  (four  bits)  are  present  in  the  CIR  at  all 
times.  The  site  ID  field  is  used  in  transmitting 
ATARS  multisite  information  via  the  transponder 
(see  Appendix  G)  and  is  used  only  indirectly  in 
the  ATARS-BCAS  interface  actions.  Each  ATARS 
ground  site  is  assigned  one  of  four  site  ID* s. 

Each  bit  in  the  site  ID  field  refers  to  one  of 
these  site  ID's.  Every  scan,  for  as  long  as  an 
aircraft  is  within  the  ATARS  service  zone  of  a 
particular  site,  that  site  will  uplink  its  site  ID 
in  the  surveillance  interrogation.  The  CIR  will 
set  the  corresponding  bit  in  the  site  ID  field  to 
one  and  will  reset  a  timer  for  that  site  ID  to 
zero.  The  CIR  will  periodically  observe  the  timer 
for  each  site  ID.  If  the  timer  for  one  particular 
ID  has  reached  a  certain  threshold  value,  the  CIR 
will  reset  the  corresponding  bit  in  the  site  ID 
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field  to  zero.  If  several  sites  simultaneously 
have  the  aircraft  in  their  1T1BS  service  areas, 
several  site  10  bits  nay  be  set  in  the  site  ID 
field.  Every  tine  the  transponder  receives  a 
surveillance  interrogation  the  site  ID  field  will 
be  updated  appropriately.  If  any  bit  in  the  site 
ID  field  is  one,  the  A  bit  will  be  set  to  one. 

The  A  tit  thus  indicates  that  the  aircraft  is 
vithin  the  ATARS  service  area  of  at  least  one 
ATABS  site. 

The  Cl F  has  only  one  A  bit  and  site  ID  field.  All 
other  bits  and  bit  fields  are  repeated  in  distinct 
rows,  one  for  each  sinultaneous  threat.  If  there 
are  no  threats,  the  CIB  consists  of  only  an  A  bit 
and  site  ID  field.  As  new  threats  appear,  the 
airborne  computer  defines  additional  rows  in  the 
CIR  and  releases  then  as  the  corresponding  threats 
disappear.  In  this  way,  the  interface  is  able  to 
coordinate  for  an  arbitrary  nunber  of  sinultaneous 
threats. 

The  following  discussion  refers  to  the  case  of  a 
single  threat.  (Refer  to  Figure  C-2-2.)  If  the  B 
bit  is  set,  the  aircraft  has  connitted  itself  to 
BC AS  for  providing  separation  from  the  threat;  if 
the  C  tit  is  set,  the  responsible  system  is  ATABS. 
The  E  and  C  bits  cannot  both  be  set  at  the  sane 
tine.  They  nay  both  be  null,  however,  if  the 
aircraft  is  currently  involved  in  negotiating 
responsibility  for  separation  fron  the  indicated 
threat.  The  D  field  contains  the  resolution 
maneuver  which  would  be  appropriate  for  aircraft 
to  provide  separation  against  the  threat  to  which 
the  row  refers.  If  the  C  bit  is  set  (own  aircraft 
nay  be  eguipped  with  ECAS  or  with  ATABS) ,  the  D 
field  contains  the  ATABS-originated  resolution 
advisory  being  displayed  to  the  pilot.  If  the  B 
bit  is  set  and  own  aircraft  is  eguipped  only  with 
ATARS,  the  D  field  contains  a  ECAS  advisory 
conplenent,  which  is  not  displayed  to  the  pilot. 
For  ezanple,  in  an  ATARS  vs.  ECAS  encounter  where 
BCAS  is  responsible,  suppose  BCAS  has  issued  a 
descend  advisory  to  its  pilot.  Then  the  contents 
of  the  D  field  in  the  ATARS  aircraft  would  be  a 
clinb  advisory,  and  this  would  not  be  displayed  to 
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its  pilot.  The  contents  of  the  D  fields  are  used 
as  constraints  in  the  selection  of  advisories  when 
secondary,  tertiary,  etc. ,  conflicts  naterialize. 

The  D  field  is  conposed  of  ten  bits.  The  coding 
of  these  ten  bits  is  indicated  in  Table  C-2-1.  It 
is  necessary  that  this  coding  be  able  to  indicate 
the  presence  of  any  horizontal  saneuver 
concurrently  with  the  presence  of  any  vertical 
saneuver,  because,  in  a  few  special  situations, 
the  current  ATARS  logic  can  sisultaneously  issue 
both  horizontal  and  vertical  advisories  to  protect 
against  a  single  threat.  The  interface  logic 
provides  for  the  coordination  of  vertical  speed 
linit  (VSL)  advisories  as  well  as  for  positive  and 
negative  advisories.  Individual  bits  within  the  D 
field  make  this  possible.  Three  spare  bits  have 
been  provided  within  the  D  field. 

The  ID  field  of  the  CIR  contains  information 
related  to  the  identity  of  the  threat  aircraft. 

If  the  threat  is  DABS  eguipped,  the  ID  field 
contains  the  threat's  twenty-four  bit  DABS  ID.  If 
the  threat  is  ATCRES-eguipped  the  ID  field 
contains  the  ATCRBS  Mode-A  code  being  transmitted 
by  the  threat.  Nhenever  one  row  in  the  CIR 
pertains  to  an  ATCRBS  aircraft,  it  is  understood 
that  the  next  CIR  row  contains  the  threat's  track 
relative  to  own.  This  relative  track  (relative 
range,  relative  bearing,  relative  altitude,  and 
their  rates)  and  Mode-A  code  are  used  to  identify 
the  ATCRBS-equipped  threat  to  other  computers. 
Associated  with  the  CIR  row  for  such  a  threat  is 
also  a  local  ID,  by  which  the  ATARS-ECAS  interface 
and  the  BCAS  logic  on  the  same  aircraft  identify 
it  when  communicating  with  each  other. 

The  active  BCAS  or  the  full  capability  BCAS  in  its 
active  mode  nay  not  make  Mode-A  interrogations  of 
threat  aircraft.  If  this  is  the  case,  the  threat 
ID  field  of  the  CIR  will  be  filled  with  all  zeros. 
The  Mode-A  code  will  not  then  be  used  in 
identifying  ATCRBS  threats  between  different 
computers.  For  BCAS  operating  in  an  active  node 
it  is  also  possible  that  bearing  information  will 
not  be  available  or  will  be  of  low  accuracy.  In 
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TABLE  C-2-1 


COOING  OF  THE  CIR  D  FIELD 


1  ■*  Horizontal  coaaund 


0  -  No  horizontal  command 


1  ■  Horizontal  ia  negative 


0  »  Horizontal  ia  poaitive 


0  ■  Sense  ia  turn  left  or 
don't  turn  right 


1  “  Sense  is  turn  right  or 
don't  turn  left 


1  *  Vertical  coanand 


1  “  Vertical  ia  negative  or 
or  VSL  according  to  bit  6 


0  ■  Vertical  is  positive 


0  ■  Negative 


1  “  Sense  is  descend  or 
don't  cliab 


0  “  Sense  is  climb  or 
don't  descend 


~T 


fl| - ■■ 


this  case,  bearing  information  will  not  be  used  in 
the  identification  process. 

Finally,  tbe  E  bit  is  set  when  BCAS-to-BCAS 
coordination,  a  process  to  be  described  later  in 
this  section,  is  in  progress. 

C- 2. 3 _ Example  Conflict  Sgenarjos 

Father  than  describing  each  part  of  the 
coordination  process  in  general,  several  specific 
conflict  scenarios  (see  Figure  C-2-3)  will  be 
presented.  In  Figure  C-2-3,  an  X  narks  the 
position  of  an  aircraft  when  the  hazard 
materializes.  The  ATABS  and  ECAS  service  zones 
are  configured  as  in  Figure  C-2-1.  Assuae  that 
all  aircraft  are  outside  the  active  interrogation 
inhibit  boundary. 

Consider  Scenario  A.  Both  aircraft  are  within  the 
ATABS  service  zone,  and  conseguently ,  their  A  bits 
are  both  set.  When  BCAS  on  aircraft  1  detects  a 
hazard,  it  locks  its  CIB,  assigns  a  row  to  the  ID 
of  aircraft  2,  sets  the  E  bit  in  that  row,  and 
fills  the  D  field  of  that  row  with  a  provisional 
BCAS  advisory.  Bext,  it  innediately  transnits  a 
special  coordination  interrogation,  addressed  to 
aircraft  2.  The  coordination  interrogation 
contains  the  ID  of  aircraft  1,  an  indication  that 
aircraft  1 's  A  bit  is  set,  and  the  conplenent  of 
the  provisional  BCAS  advisory  stored  in  its  D 
field.  Ihen  aircraft  2  receives  the  coordination 
interrogation,  it  locks  its  CIB  (if  it  is  not 
busy) ,  and  then  transnits  a  reply  which  contains 
everything  in  its  CIB  except  its  site  ID  field  and 
F  bits.  If  its  CIB  was  busy  when  the  coordination 
interrogation  was  received,  aircraft  2  replies,  in 
effect,  CIB  busy;  try  again.  Aircraft  1  would 
retransnit  the  sane  coordination  interrogation 
until  it  had  received  a  reply  or  until  a  specified 
period  of  tine  had  elapsed.  After  replying, 
aircraft  2  checks  its  CIB  to  see  if  its  A  bit  is 
currently  set.  It  is,  and  the  BCAS  advisory 
conplenent  is  rejected.  Vhen  ECAS  on  aircraft  1 
receives  the  reply,  it  recognizes  that  aircraft  2 
is  being  given  ATABS  service,  since  aircraft  2's  A 
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FIGURE  C-2-3 
EXAMPLE  CONFLICTS 


I 


bit  is  set.  Upon  checking  ovn  CIS#  BCAS  finds 
that  aircraft  1  is  itself  also  being  given  A1ABS 
service  (since  ovn  A  kit  is  set) .  BCAS  then 
unlocks  its  CIB  and  surrenders  the  conflict  to 
ATABS.  In  this  vay,  BCAS  is  lade  to  self-suppress 
vhen  both  ovn  and  threat  are  vithin  ATABS 
protection. 

Next  consider  Scenario  B.  Suppose  BCAS  on 
aircraft  1  is  first  to  detect  a  hazard.  As  in 
scenario  A,  BCAS  locks  ovn  CIB,  sets  up  a  rov  for 
aircraft  2,  and  sends  a  coordination  interrogation 
to  aircraft  2.  Aircraft  2  locks  its  CIB,  reads 
out  its  contents  into  the  coordination  reply,  and 
exanines  the  infornation  sent  in  the  coordination 
interrogation.  That  infornation  identifies  the 
sender  as  aircraft  1,  and  indicates  that  aircraft 
1*  s  A  bit  is  not  set.  Upon  checking  ovn  CIB,  BCAS 
on  aircraft  2  finds  no  rov  assigned  to  the  10  of 
aircraft  1.  It  then  establishes  one,  and  sets  the 
B  bit  connitting  to  BCAS  (because  there  are  not 
two  A  bits  set).  Rhen  BCAS  on  aircraft  1  receives 
the  coordination  reply,  it  sees  that  aircraft  2*s 
CIR  contained  no  rov  assigned  to  aircraft  1,  and 
then  se*s  ovn  B  bit  for  aircraft  2,  displays  the 
BCAS  advisory  to  its  pilot,  and  unlocks  the  CIB. 
Thus,  vhen  both  aircraft  are  outside  the  ATABS 
service  zone,  BCAS  resolves  the  conflict. 

Scenario  C  involves  the  coverage  floor  boundary  of 
the  ATABS  service  zone,  as  veil  as  a  third 
aircraft,  so  the  full  capability  of  the  interface 
can  be  illustrated.  According  to  the  placenent  of 
the  aircraft,  it  can  be  deduced  that  the  A  bits  of 
aircraft  1  and  3  are  set,  vhile  that  of  aircraft  2 
is  not  set.  Suppose  the  first  conflict  to 
materialize  is  aircraft  1  vs.  aircraft  2.  The 
air-to-air  coordination  inforns  BCAS  on  aircraft  1 
that  aircraft  2  is  outside  ATABS  service,  so  BCAS 
sets  ovn  B  bit  corresponding  to  aircraft  2,  and 
displays  the  associated  advisory  (stored  in  the  0 
field  of  that  sane  rov)  to  its  pilot.  The  next 
tine  ATABS  interrogates  aircraft  1,  the  entire 
contents  of  its  CIB  (except  for  the  E  bits)  are 
dovnlinked.  Upon  receiving  this  infornation, 

ATABS  sets  up  a  conflict  table  for  the  aircraft  1 
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-  aircraft  2  conflict,  including  the  ID  of 
aircraft  2  and  the  BOS  advisory  being  displayed 
to  the  pilot  of  aircraft  1.  The  conflict  table 
also  specifically  indicates  that  EOS  is 
responsible  for  resolving  that  conflict. 

Next,  aircraft  3  coies  into  conflict  with  aircraft 
1.  The  air-to-air  coordination  inforus  BOS  on 
aircraft  1  that  both  own  and  threat  are  within  the 
ATAPS  service  zone,  so  it  ceases  further  BOS 
activity  and  waits  for  ATABS  to  resolve  the 
conflict.  When  ATABS  detects  the  aircraft  1  - 
aircraft  3  conflict,  it  selects  a  set  of 
advisories  which  is  compatible  with  aircraft  1’s 
BC AS  advisory,  which  it  finds  from  referencing  the 
existing  conflict  table.  ATAPS  then  uplinks  the 
advisory  to  aircraft  1,  along  with  the  It  of 
aircraft  3.  Upon  receiving  the  ATAPS  message, 
aircraft  1  locks  own  CIR,  compares  the  message 
with  own  CIR,  and  finds  that  the  row  for  aircraft 
3  has  not  had  its  E  bit  set.  It  also  finds  that 
the  ATAPS  advisory  does  not  conflict  with  any 
other  pre-existing  advisory.  If  an 
incompatibility  had  been  detected,  the  ATABS 
advisory  would  be  rejected  by  aircraft  1.  ATARS 
would  then  be  forced  to  wait  one  more  scan,  during 
which  it  would  reselect,  if  possible,  an  advisory 
for  aircraft  1  which  was  compatible  with  the  ECAS 
advisory  and  witn  the  ATARS  advisory  accepted  by 
aircraft  3.  If  an  advisory  cannot  be  found  for 
aircraft  1  that  is  compatible  with  the  ECAS 
advisory  for  aircraft  1  and  the  ATARS  advisory 
accepted  by  aircraft  3,  ATARS  will  reselect  the 
entire  set  of  advisories  for  the  aircraft  1  - 
aircraft  3  conflict.  This  may  mean  that  the 
advisory  in  aircraft  3  has  changed.  This 
particular  situation  represents  the  only  known 
case  in  which  the  ATARS-BCAS  interface  has  failed 
to  meet  all  of  the  design  reguirenents  presented 
in  Section  C-1.2. 

In  the  normal  seguence  of  events  in  which  the 
ATARS  advisory  is  not  rejected,  aircraft  1  then 
sets  the  C  bit  in  the  CIR  row  associated  with 
aircraft  3,  stores  the  ATABS  advisory  in  that 
row's  D  field,  displays  the  ATABS  advisory  to  its 


pilot  and  unlocks  own  CIB.  ATABS,  of  course, 
uplinks  an  advisory  to  aircraft  3,  which  sets  up 
the  appropriate  CIB  fields,  etc.  Thus,  it  can  be 
seen  that  coapatibility  of  advisories  is  assured 
by  watching  the  coordination  aessage  information 
with  the  contents  of  the  CIB.  It  is  also  apparent 
that  the  pop-up  intruder  is  handled  appropriately. 

Suppose  the  first  conflict  to  naterialize  had 
been  aircraft  1  vs.  aircraft  3.  Then  the  first 
row  in  aircraft  1's  CIB  would  have  the  C  bit  set, 
and  an  ATABS  advisory  in  the  D  field.  Bhen 
aircraft  2  cones  into  conflict  with  aircraft  1, 
BCAS  on  aircraft  1  is  able  to  select  an  evasive 
maneuver  conpatible  with  the  ATABS  advisory 
already  being  displayed  (if  such  selection  is 
possible  based  on  the  ECAS  operating  node) . 

One  should  bear  in  wind  that  the  CIB  controller  is 
all  the  while  granting  access  to  own  BCAS  logic, 
air-to-air  coordination  aessage  processing,  and 
ATABS  aessage  processing,  one  at  a  tine.  If  the 
CIB  is  busy  when  the  aircraft  receives  an 
interrogation  froa  the  ground,  the  aircraft 
replies  with  a  CIB  Eusy  aessage.  The  ground 
systea  will  atteapt  repeated  interrogations  while 
the  aircraft  is  still  within  the  CABS  antenna's 
aain  beaa.  (lore  than  ten  opportunities  for 
downlinking  are  noraally  available  in  one  DABS 
scan,  so  the  CIB  can  be  read  by  the  ground  on  any 
given  scan  with  high  probability. 

In  Scenario  D,  aircraft  2  does  not  have  the  ATABS 
service  bit  set.  Bhen  the  BCAS  on  aircraft  2 
senses  a  conflict  with  aircraft  1,  the  air-to-air 
coordination  gives  responsibility  to  BCAS.  ATABS 
will  becoae  aware  of  the  BCAS  conflict  through 
downlinking  of  the  CIB  froa  aircraft  1.  If 
aircraft  2  crosses  the  service  zone  boundary  while 
the  resolution  of  the  conflict  is  in  progress, 
ATABS  avoids  setting  the  site  ID  bit  on  the  uplink 
until  the  conflict  is  over  and  aircraft  2  is 
reporting  a  null  CIB. 

Soae  additional  features  of  the  interface  can  be 
illustrated  using  Figure  C-2-4.  Assuae  again  that 
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FIGURE  C-2-4 

ADDITIONAL  EXAMPLE  CONFLICTS 


all  aircraft  are  outside  the  active  interrogation 
inhibit  boundary.  In  Scenario  I  a  conflict 
between  two  BC AS-eguipped  aircraft  naterializes 
when  both  aircraft  are  beneath  the  DABS  coverage 
floor.  Air-to-air  coordination  establishes  BCAS 
as  the  responsible  systen.  Then,  as  indicated  by 
the  arrows,  both  aircraft  becone  visible  to  ATABS 
while  the  conflict  is  still  in  progress.  On  each 
interrcgation  fron  the  ground,  both  aircraft  would 
be  downlinking  the  contents  of  their  CIB's.  ATABS 
sets  up  a  conflict  table  for  this  pair,  indicating 
BCAS  as  the  responsible  systen,  and  does  not 
uplink  advisories  even  though  the  conflict  is 
wholly  within  the  ATABS  service  zone.  Fron  this 
type  of  action,  one  is  pronpted  to  refer  to  the 
boundary  between  the  ATABS  and  BCAS  service  zones 
as  a  soft  boundary.  It  can  also  be  noted  that  if 
the  boundary  involved  in  this  scenario  were  the 
range  boundary,  the  sane  events  would  occur. 

The  reverse  of  this  conflict  is  depicted  in 
Scenario  F.  Here,  a  conflict  between  a  BCAS  and 
an  ATABS  aircraft  naterializes  within  the  ATABS 
service  zone,  so  ATABS  is  the  responsible  systen. 
Even  though  ECAS  is  inhibited  fron  displaying 
advisories,  it  is  still  free  to  periodically  issue 
coordination  interrogations  to  the  threat 
aircraft,  as  long  as  it  perceives  a  hazard.  As 
the  aircraft  drop  out  of  DABS  coverage  in  the 
niddle  of  resolving  the  conflict,  the  air-to-air 
coordination  nessages  serve  to  update  the  tineout 
for  the  advisory  existing  on  the  display  of  the 
ATABS  aircraft.  Therefore,  the  ATABS-originated 
advisory  renains  displayed  in  the  ATABS  aircraft 
for  as  long  as  BCAS  believes  a  collision  threat 
exists.  It  is  seen  fron  this  exanple  that  the 
boundary  between  the  ATABS  and  BCAS  service  zones 
is  soft  in  both  directions.  If  the  boundary  in 
this  scenario  were  the  range  boundary  instead  of 
the  coverage  floor  boundary,  the  sane  effects 
would  be  observed. 

Finally,  in  Scenario  G,  a  BCAS-eguipped  aircraft 
cones  into  conflict  with  an  ATCBES-equipped 
aircraft.  Since  aircraft  2  does  not  have  a  CIB, 
it  is  not  involved  in  the  negotiation  process. 


Since  it  has  no  collision  avoidance  display,  the 
only  aircraft  to  receive  resolution  advisories  is 
aircraft  1-  Since  aircraft  1  is  outside  the 
active  interrogation  inhibit  boundary,  it  will 
conduct  nornal  processing.  Bhether  responsibility 
for  this  conflict  falls  to  ATABS  or  ECAS  depends 
on  which  systea  is  first  to  set  the  E  bit  or  C  bit 
in  the  CIS  of  aircraft  1.  The  ECAS  eguipnent  will 
use  a  snaller  lead  tine  against  ATCBBS  threats 
than  the  lead  tine  used  by  ATABS  to  ensure  that 
ATARS  will  usually  be  the  systen  accepting 
responsibility  when  it  sees  the  ATCBES  threat.  If 
the  ATCRBS  threat  were  below  the  DABS  coverage 
floor,  BCAS  would  accept  responsibility.  Thus,  it 
is  clear  that  the  interface  pernits  BCAS  to 
protect  against  ATCRBS  pop-up  threats  as  well  as 
BCAS  and  ATARS  pop-up  threats. 

If,  in  all  of  the  preceding  exanple  scenarios,  a 
BCAS  aircraft  had  been  inside  the  active 
interrogation  inhibit  boundary,  the  ECAS  aircraft 
would  have  inhibited  BCAS  resolution  advisories 
automatically.  It  would  not  aake  coordination 
interrogations  to  deteraine  the  conditions  in  the 
threat  aircraft.  All  resolution  would  be  provided 
by  ATARS  in  this  case.  Protection  against  pop-ups 
would  not  be  required.  Still,  ECAS  would  be 
permitted  to  conduct  passive  surveillance  and 
would  be  peraitted  to  issue  resolution  advisories 
as  soon  after  failure  of  a  DABS  sensor  as  the 
ATARS  service  bit  becoaes  unlocked. 
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in  tni  -  suction,  '  'twar  structures  and  detailed 
:er:s:  .1  logic  for  the  ATABS-BCAS  interface  are 
a:.d  discussed.  Firs*,  the  high-level 
U-1-,  onsbir  between  the  BCAS  collision  avoidance 
It  ic  .11  thv  ATABS-ECAS  coordination  function  is 
ie  s  .  ’ ,  including  lessases  sent  between  the  two 
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>ntrcilo«  ^  p: *-.sen v.ed ,  followed  by  decision 
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"he  functions  w  track  targets,  detect 

conf.ic4.-,  'sr  ler  *  ;yr  ivis  nal)  resolution 
adviso  or  e».  .i^g  tl  ,  and  drive  the  cockpit 
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functions  have  been  kept  .stinct  froa  the  ATABS- 
BCAS  inteiface.  This  subsection  addresses  the 
(i n* ra-coaputer)  lies;  t'jrs  sent  between  these  two 
functions. 

Cottaunicati on  between  the  BCAS  collision  avoidance 
alqorithns  and  the  ATABS-BCAS  interface  is  always 
initiated  by  the  BCAS  algorithws.  Three  types  of 
aessages  can  be  sent  froa  the  ECAS  logic  to  the 
interface,  and  each  has  its  own  type  of  response. 
The  first  aessage  type  is  sent  when  ECAS  has 
detected  a  conflict,  selected  provisional 
resolution  advisories  for  resolving  it,  and 
desires  coordination  for  finalizing  resolution 
advisories.  The  aessage  sent  to  the  interface 
consists  of  the  threat  ID,  together  with  the 
provisional  advisory  set  (e.g..  Own  Turn  Bight, 
Threat  Turn  left),  which  is  referred  to  as  the 
variable  NTENT  in  ie  CAS  collision  avoidance 
algorithas.  It  is  the  task  of  the  interface  to 
test  the  OWN  part  of  this  provisional  set  of 
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advisories  for  compatibilit y  with  other  advisories 
own  aircraft  sight  already  be  following,  and  to 
coordinate  own's  desire  to  resolve  the  conflict 
with  the  other  computers  involved. 

Specifically,  the  interface  determines  whether  or 
not  own  has  already  committed  to  ATABS  for 
resolving  the  indicated  conflict,  and  if  not, 
performs  air-to-air  coordination  with  *he  threat 
to  establish  compatibility  with  the  threat's 
intentions.  Any  level  of  incompatibility  (between 
pre-existing  own  advisories,  prior  commitment  by 
own  or  threat  to  ATABS,  or  pre-existing  threat's 
intent)  is  resolved  by  the  ATABS-BCAS  interface, 
and  the  results  are  returned  to  the  BCAS 
algorithms.  If  air-to-air  coordination  determines 
that  the  A  bits  of  both  own  and  threat  are  set, 
this  fact  is  communicated  to  own  BCAS.  Hhen  BCAS 
desires  to  drop  the  advisory  for  an  old  threat 
(and  only  if  the  B  bit  is  set  for  that  threat), 
this  message  is  sent  to  the  interface  one  last 
time,  with  a  null  advisory  indication  (KTENT  =  0). 
The  interface  logic  will  recognize  this  as  an 
advisory  deletion,  and  will  delete  the 
corresponding  row  (s)  from  the  CIB. 

The  second  type  of  message  sent  by  the  BCAS 
algorithms  is  a  reguest  for  own  A  bit  (this 
information  is  used  to  determine  whether  ATABS  or 
BCAS  should  display  traffic  advisories)  and  the 
corresponding  reply  is  own  A  bit.  The  third 
message  type  is  a  track  update  for  an  ATCBBS 
threat,  against  which  separation  is  to  be  provided 
by  BCAS.  Since  this  type  of  threat  is  identified 
to  other  computers  by  its  position  and  velocity 
relative  to  own,  it  is  necessary  to  update  this 
identification  whenever  own  tracker  estimates  are 
updated.  To  facilitate  correlation  of  the  updated 
track  with  the  old  one  already  in  the  CIB,  a  local 
threat  ID  is  included  in  this  message.  Since  no 
use  is  made  by  BCAS  of  the  knowledge  that  the 
track  in  the  CIB  has  been  updated,  no  reply  is 
sent. 

The  intra-computer  message  set  is  summarized  in 
Table  C-3-1. 
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The  software  aechanisa  which  oversees  the  use  of 
the  CIB  is  referred  to  as  the  CIB  Controller.  The 
purpose  of  the  CIB  Controller  is  to  perait  only 
one  function  at  a  tine  (branch  of  logic,  reply  to 
air-to-air  coordination  interrogation,  etc.)  to  be 
serviced  by  the  CIB.  In  this  way,  it  prevents 
scraabling  of  coordination  actions  due  to  tiae- 
interleaving  of  events.  A  function  desiring 
access  to  the  CIS  causes  a  lock  coaaand  to  be  sent 
to  the  CIB  Controller,  along  with  the  ID  of  the 
threat  with  which  that  function  is  currently 
concerned.  If  the  CIB  is  not  busy,  the  CIB 
Controller  grants  access  to  the  reguesting 
function,  and  siaultaneously  locks  out  other 
functions  fron  gaining  access.  When  the  function 
is  finished  using  the  CIB,  an  unlock  coaaand  is 
sent  to  the  CIB  Controller,  which  then  frees  the 
CIF  for  access  by  other  functions.  If  a  function 
sends  a  lock  coaaand  to  the  CIB  Controller  while 
the  CIB  is  busy,  the  CIB  Controller  denies  access 
by  replying  "CIB  Busy"  and  a  loop  keeps  sending 
lock  conaands  froa  the  reguesting  function  until 
it  gains  access. 

If  the  function  desiring  access  to  the  CIB  is 
servicing  an  interrogation  received  froa  another 
systea  (i.e.,  ATABS  or  another  BCAS)  ,  the 
following  actions  occur.  A  partial  decoding  of 
the  interrogation  deteraines  the  nature  of  the 
sender.  If  the  sender  is  BCAS  and  if  the  CIB  is 
in  the  UNLOCKED  state,  its  contents  are  read  out 
directly  into  the  coordination  reply;  the  CIB  in 
this  case  acts  as  a  reply  aessage  buffer.  If  the 
CIB  is  in  the  LOCKED  state,  a  "CIB  Eusy" 
indication  is  read  directly  into  the  reply. 
However,  an  exception  occurs  if  the  CIB  is  busy 
because  own  BCAS  has  Bade  a  coordination 
interrogation  of  another  BCAS  at  the  tine  a 
coordination  interrogation  is  received  froa  this 
sane  BCAS.  In  this  case,  the  reply  to  the 
coordination  interrogation  depends  upon  which  DABS 
ID  has  the  higher  order  address.  If  the  other 
BCAS  has  the  higher  order  address,  a  priority 
interrupt  of  the  logic  using  the  CIB  is  perforned. 
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the  CIB  is  sent  in  a  coordination  reply,  and  the 
coordination  interrogation  is  serviced.  In  the 
case  when  the  CIB  is  free  and  available  for 
readout  into  the  reply,  that  readout  action  is 
simultaneous  with  locking  the  CIB.  The  CIB  reply 
logic  is  explained  further  in  the  following 
subsection. 

SrJj.3 _ Detflji§3_£gaxdisali3£  .ififlis 

Logic  which  is  to  be  executed  upon  receipt  of  an 
interrogation  froa  another  systew  is  presented  in 
Figure  C-3-1.  It  eust  be  perforaed  by  aircraft 
eguipped  with  ATARS  and  by  aircraft  having  full 
BCAS  units.  This  logic  is  executed  in  parallel 
with  the  transmission  of  the  CIB  or  the  "CIR  Busy" 
message.  The  interrogation  is  examined  in  order 
to  decide  whether  the  sender  is  ATARS  or  another 
BCAS.  In  the  former  case,  the  ATABS  coordination 
logic,  presented  in  Figure  C-3-2,  is  executed.  A 
picture  of  the  CIB  is  included  in  this  figure  for 
easy  reference. 

Since  the  logic  in  Figure  C-3-1  is  executed 
simultaneously  with  the  the  transmission  of  the 
reply,  the  logic  in  Figure  C-3-2  must  first 
determine  whether  the  CIB  is  being  returned  or  a 
"CIR  Busy"  message  is  being  returned.  If  the  CIB 
was  free  at  the  moment  the  interrogation  was 
received,  its  contents  were  downlinked  to  ATABS, 
and  the  CIB  was  simultaneously  locked.  This  logic 
then  has  access  to  the  CIR. 

The  message  sent  from  ATABS  is  examined  to 
determine  if  it  contains  any  positive  or  negative 
resolution  advisories,  if  it  does  not,  the  site 
ID  bits  in  the  uplink  are  observed  and  the  site  ID 
field  in  the  CIB  is  updated.  The  A  bit  in  the  CIB 
is  then  updated.  If  the  A  bit  is  set,  then  the 
the  current  tine  is  recorded  as  the  variable  LTABS 
("last  time  *A»  bit  set").  If  the  A  bit  is  not 
set,  and  if  16  seconds  (system  parameter)  have 
elapsed  since  the  last  tine  it  was  set,  own  A  bit 
is  reset.  This  timeout  prevents  the  CIB's  ATABS 
service  bit  froa  remaining  set  after  the  aircraft 
has  passed  out  of  DABS  coverage.  Since  no  ATABS 
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FIGURE  C-3-1 

LOGIC  PERFORMED  BY  BCAS  OR  ATARS  AVIONICS  ON  RECEIPT  OF  AN 
INTERROGATION  FROM  ANOTHER  BCAS  OR  ATARS 
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advisories  are  present  in  this  aessage,  all 
existing  ATABS  advisories  arc  deleted.  The  CIB  is 
then  unlocked  and  this  branch  of  logic  is  exited. 

If  the  interrogation  did  contain  at  least  one 
positive  or  negative  ATABS  advisory,  the  logic 
sets  the  variable,  CRD,  equal  to  the  first  one  in 
the  aessage.  It  also  sets  TID  (threat  identity) 
equal  to  the  threat  ID  in  this  A1ABS  aessage  that 
corresponds  to  the  advisory.  TID  is  then  passed 
to  routine  TIC  (Threat  Identity  Correlator)  which 
coapares  it  to  every  ID  already  in  the  CIB.  If 
the  threat  is  equipped  only  with  ATCBBS,  TID  is 
its  position  and  velocity  relative  to  own  (as 
aeasured  by  ATABS)  and  the  Hodc-A  code,  and  TIC 
aust  correlate  this  with  the  corresponding  ATCBBS 
threat  ID  already  in  the  CIB,  if  present. 

This  correlation  will  be  perforaed  in  the 
following  way.  The  vector  difference  between  the 
coordinates  of  a  threat  already  in  the  CIB  and  the 
coordinates  in  the  incoaing  aessage  will  be 
coaputed.  A  separate  weighting  factor  will  be 
aultiplied  tiaes  the  difference  in  each 
coordinate.  The  weighting  factors  will  be  zero 
for  the  bearing  and  bearing  rate  coordinates  when 
the  BCAS  is  operating  in  the  active  node  and  will 
be  zero  for  the  Hode-A  code  when  it  is  not 
present.  The  weighting  factors  will  take  into 
account  expected  aeasureaent  errors  for  each  of 
the  coordinates.  The  weighted  coordinates  will 
then  be  coabined  in  a  root  sua  sguare  operation 
and  the  resulting  nuaber  will  be  coapared  to  a 
threshold.  If  the  nuaber  is  less  than  the 
threshold,  then  a  natch  has  been  found. 

If  TIC  finds  a  natch,  it  sets  I  equal  to  the 
corresponding  CIB  row  nuaber;  if  no  natch  is 
found,  I  is  given  a  null  value.  Control  is  then 
returned  to  the  point  at  which  TIC  was  called. 

If  I  is  not  null,  then  the  • B*  bit  (coaait  to 
BCAS)  is  checked  to  see  which  systea  has  already 
entered  the  advisory  for  evading  this  threat.  If 
that  systea  is  ATABS  and  CRD  is  null,  then  row  I 
is  deleted  froa  the  CIB.  If  the  systea  is  ATABS 
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and  CHD  is  not  null,  then  the  resolution  advisory 
for  that  threat  from  the  uplink  is  copied  into  the 
D  field  in  the  CIF.  The  current  tine  is  recorded 
in  the  variable  LTACS  ("last  tine  ATABS  coanand 
set").  LI AC S  is  used  as  a  tineout  which  causes 
advisories  to  be  autonatically  turned  off  after  a 
specified  tine  if  the  aircraft  leaves  the  ATABS 
service  zone  through  the  DABS  coverage  floor. 

If  TIC  returns  a  null  value  of  I,  then  this  is  the 
first  advisory  received  fron  any  systen  for 
evading  this  particular  threat.  A  check  is 
perforned  to  deternine  whether  the  ATABS  advisory 
received  on  this  uplink  is  conpatible  with  all 
other  advisories  appearing  in  the  CIB.  If  a  new 
BC AS  advisory  (for  evading  sone  other  threat)  had 
appeared  in  the  CIF  after  the  previous  downlink, 
ATABS  would  not  have  been  able  to  use  it  as  a 
constraint  in  selecting  advisories.  To  check  for 
compatibility,  the  ATABS  advisory  received  on  this 
uplink  (CHD) ,  together  with  an  inage  of  the  CIB 
(ACIB)  ,  is  passed  to  routine  COHCOBP  ("coanand 
compatibility").  This  routine  conpares  CUD  with 
all  D  fields  (own  intents)  already  in  the  CIB. 
COBCOBF  uses  the  conpatibility  matrix  presented  in 
Table  C-3-2  to  nake  this  deter aination.  If  no 
incompatibility  is  detected,  a  row  in  the  CIB  is 
allocated  to  the  indicated  threat.  Cl  is  set 
(connitting  to  ATABS  for  separation  fron  this 
threat),  and  the  ATABS  advisory  is  written  into 
the  intent  field  D.  If  any  other  ATABS  advisory 
received  on  this  uplink  renains,  it  is  processed. 
If  not,  the  CIB  is  unlocked  and  this  branch  of 
logic  is  exited. 

If  the  logic  presented  in  Figure  C-3-1  deternines 
that  the  interrogation  was  a  BCAS  coordination 
interrogation,  ID  is  set  egual  to  the  CAES  ID  of 
the  sender  (included  in  that  interrogation) ,  and 
CHD  is  set  egual  to  the  BCAS  advisory  conpleaent, 
also  sent  in  the  interrogation.  The  logic 
presented  in  Figure  C-3-3  is  then  executed. 

A  check  is  first  nade  to  deternine  whether  the 
DABS  ID  of  the  sender  is  of  higher  priority  (is 
larger)  than  own  DAES  ID.  If  it  is  not,  a  reply 
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RESOLUTION  ADVISORY  COMPATIBILITY  MATRIX 


TR 

TL 

CL 

DES 

DTR 

DTL 

DCL 

DDES 


TR  TL  CL  DES  DTR  DTL  DCL  DDES 


1  -  COMPATIBLE 
0  -  INCOMPATIBLE 
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is  emitted  containing  oh  CIS  if  it  is  not  busy  at 
the  moment,  or  a  CIB  Busy  message  if  it  is  busy. 

If  the  sender's  ID  is  of  higher  priority  than  own 
ID,  own  BC AS  logic's  use  of  the  CIB  is  interrupted 
if  that  logic  currently  has  the  CIB  locked  because 
it  is  waiting  for  a  reply  to  a  coordination 
interrogation  from  the  sender.  The  reason  for 
this  is  that  o«n  BCAS  sight  simultaneously  be 
attempting  to  coordinate  with  this  threat,  and 
this  action  is  necessary  to  prevent  a  deadlock. 

The  priority  interrupt  has  the  effect  of  tie¬ 
breaking  in  this  case.  The  CIB  is  then  sent  in  a 
coordination  reply. 

When  this  branch  of  logic  is  given  access  to  the 
CIR  by  either  of  these  paths,  routine  TIC  ("threat 
identity  correlator")  is  called.  If  it  returns  a 
null  value  of  I  (no  advisory  has  yet  been  posted 
for  evading  the  indicated  threat) ,  a  check  is  made 
of  both  aircraft's  'A*  bits.  If  they  are  both 
set,  ATABS  is  responsible  for  resolving  this 
conflict  and  the  BCAS  advisory  is  rejected.  If  at 
least  one  'A'  bit  is  not  set,  routine  COBCOBF 
("command  compatibility")  is  called.  If  CBD  is 
found  to  be  compatible  with  every  pre-existing 
advisory  in  the  CIB  (COBCOBP  =  1) ,  CIB  row  I  is 
assigned  to  ID,  BI  is  set,  and  CBD  is  written  into 
DI.  A  local  flag  is  also  set  to  indicate  that  DI 
is  a  BCAS  advisory  complement  and  is  not  to  be 
included  in  own  display  list. 

If  TIC  returns  a  non-null  value  of  I,  the  C  bit  of 
row  I  is  checked.  If  it  is  set,  then  own  aircraft 
had  already  committed  to  ATABS  for  separation  from 
the  indicated  threat.  The  current  time  is  then 
recorded  in  variable  LTACS  (last  time  AT1BS 
command  set)  to  update  the  timeout  for  this 
advisory.  If  the  C  bit  is  not  set,  then  either 
the  B  bit  or  E  bit  is  set.  If  the  B  bit  is  set, 
own  aircraft  had  already  committed  to  ECAS,  and 
the  content  of  the  D  field  is  either  a  BCAS 
advisory  complement  sent  from  the  threat  on  a 
previous  coordination  interrogation,  or  a  BCAS 
resolution  advisory  already  generated  by  own  BCAS. 
If  the  CBD  field  in  the  coordination  interrogation 
is  not  null,  the  current  tine  is  recorded  in 
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variable  LTBCS  ("last  tine  BCAS  command  set") ,  to 
update  that  timeout.  If  the  CMC  field  is  null, 
then  this  coordination  interrogation  vas  made  so 
that  the  CIR  row  for  that  threat  mould  be  deleted. 
However,  the  interface  logic  does  not  permit 
another  ECAS  to  terminate  the  advisory  against 
that  BCAS  if  own  is  BCAS  eguipped.  Cnly  own's 
BCAS  logic  can  cause  advisories  to  begin  or  to 
terminate.  The  coordination  interrogation  with  a 
null  advisory  is  required  to  delete  the  CIR  row 
from  an  aircraft  equipped  only  with  ATARS. 

If  neither  the  E  bit  nor  the  C  tit  is  set,  the 
only  other  way  for  a  CIR  row  for  this  threat  to 
have  been  allocated  is  for  the  E  bit  ("ECAS 
coordination  in  progress")  to  be  set.  This 
indicates  that  own  BCAS  had  been  involved  in 
coordination  and  was  interrupted  by  the  present 
logic.  In  this  case,  the  CIR  row  is  deleted  and 
CND  is  sent  to  CCHCOHE  to  determine  compatibility, 
lust  as  if  TIC  had  returned  a  null  value  of  I. 

When  this  logic  is  completed,  a  check  is  made  to 
determine  if  it  had  begun  via  a  priority 
interrupt.  If  so,  the  interrupted  logic  is  re¬ 
initiated  (not  continued  at  the  interruption 
point)  with  access  to  the  CIR  being  handed  over  to 
it.  If  no  priority  interrupt  had  occurred,  the 
CIR  is  unlocked  and  this  logic  is  exited. 

Logic  to  be  executed  when  own  ECAS  reguests 
coordination  of  advisories  is  presented  in  Figure 
C-3-4.  As  discussed  in  Subsection  C-3.1,  the  BCAS 
logic  sends  the  threat  ID  and  the  set  of 
provisional  advisories  (NTENT)  to  this  logic.  The 
first  task  is  to  separate  NTENT  into  own 
provisional  advisory  (CHDOWN)  and  the 
complementary  advisory  for  the  threat  (CHDTRT) .  A 
loop  then  sends  lock  reguests  to  the  CIR 
controller  until  access  is  granted. 

The  threat  ID  is  then  sent  to  routine  TIC.  If  a 
pre-existing  CIR  row  is  found  for  this  threat,  the 
3  bit  is  checked  to  determine  which  system  is 
responsible.  If  that  system  is  ATARS,  the  ATARS 
timeout  variable  LTACS  ("last  time  ATARS  command 
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FIGURE  C-3-4 

COORDINATION  LOGIC  INITIATED  BY  OWN  BCAS 


set”)  is  updated  to  tbe  current  tine.  If  ECAS  is 
the  responsible  systen  and  CHDOHH  is  not  null,  the 
BCAS  tineout  variable  LTBCS  ("last  tine  ECAS 
command  set”)  is  updated  to  tbe  current  tine.  An 
intracomputer  nessage  from  the  ECAS  logic  with  a 
null  C HDCHN  implies  that  BCAS  desires  to  drop 
advisories  for  this  target,  which  is  no  longer  a 
threat;  LTBCS  is  therefore  not  updated  in  this 
case. 

A  coordination  interrogation  is  sent  to  the  target 
aircraft  if  it  is  eguipped  with  ATA9S  or  BCAS. 

The  current  tine  is  also  recorded  in  order  to 
avoid  an  indefinite  wait  for  a  coordination  reply 
that  is  not  forthconing.  If  CHDOHH  *  null, 
implying  that  CHDTRT  =  null,  CHDTET  is 
nevertheless  sent  to  the  target  aircraft  in  a 
coordination  interrogation.  The  target  aircraft, 
if  it  were  ATARS  equipped,  would  then  use  the  null 
BCAS  advisory  coapleient  to  delete  its  CIR  row 
corresponding  to  own. 

Since  this  logic  does  not  differentiate  on  the 
basis  of  the  E  or  C  bit  being  set,  the 
coordination  interrogation  is  sent  to  the  threat 
regardless  of  which  system  is  responsible  for  this 
conflict.  If  that  system  is  ATARS,  the 
coordination  interrogation  enables  the  threat 
aircraft,  if  ATAfiS-eguipped,  to  maintain  its  ATARS 
advisory  as  long  as  own  BCAS  perceives  a  hazard. 
Thus,  when  the  threat  drops  out  cf  ground 
surveillance  before  the  danger  has  been 
eliminated,  BCAS  refreshes  the  AlARS-generated 
advisory  until  the  conflict  is  resolved.  If  the 
responsible  system  is  BCAS  and  the  threat  is 
ATARS-eguipped,  the  continued  coordination 
interrogation  permits  the  threat  to  maintain  its 
BCAS  advisory  complement  associated  with  own,  so 
that  ATARS  would  not  send  it  an  advisory  (to  evade 
some  threat  other  than  own)  which  thwarts  own's 
resolution. 

If  TIC  returns  a  null  value  of  I,  routine  COBCOflP 
is  called  to  ensure  that  own's  provisional 
advisory  is  compatible  with  own  CIR.  If  an 
incompatibility  is  detected  (COHCOMP  returns  a 


value  of  0) ,  a  multi-aircraf t  logic  routine  (BAC) 
is  called  to  reselect  the  provisional  set  of 
advisories.  BAC  returns  a  value  of  HTIHT,  which 
must  once  more  be  separated  into  own  provisional 
advisory  and  its  provisional  advisory  complement. 

If  the  threat  aircraft  is  ATCRBS-eguipped,  BCAS  is 
designated  the  responsible  system,  and  this  logic 
is  exited.  If  the  threat  has  ATABS  or  BCAS,  it  is 
necessary  to  perform  air-to-air  coordination.  A 
CIB  row  is  allocated  to  the  threat's  ID  and  the  E 
bit  is  set,  to  indicate  that  BCAS  coordination  is 
in  progress.  A  local  counter  N  (ID)  ,  indexed  on 
the  ID  of  the  threat,  is  also  initialized,  in 
order  to  prevent  against  looping  indefinitely  if 
the  threat's  CIB  is  malfunctioning  and  remains 
locked.  A  coordination  interrogation  (containing 
own  DABS  ID,  own  A  bit,  and  the  ECAS  provisional 
advisory  complement  CBDTRT)  is  immediately 
transmitted  to  the  threat.  If  no  reply  is 
received  by  the  tine  the  reply  wait  interval  has 
elapsed,  own  computer  commits  to  BCAS  for 
separation  from  the  threat,  provided  own  E  bit  is 
set.  If  it  is  not  set,  coordination  had 
previously  been  accomplished  and  the  logic  is 
si  mply  exited. 

If  a  coordination  reply  is  received  before  the 
reply  wait  interval  has  elapsed,  the  E  bit  is 
similarly  checked.  If  this  is  indeed  the  initial 
coordination  cycle,  the  coordination  reply  is 
examined  to  determine  whether  the  threat's  CIB  was 
busy  at  the  moment  it  received  own's  coordination 
interrogation.  If  it  was  busy,  the  same 
coordination  interrogation  is  immediately 
retransmitted,  provided  that  the  number  of 
retransmissions  is  not  excessive.  An  excessive 
number  of  coordination  interrogation 
retransmissions  is  reached  when  N(ID)  >  TC0H0 
(threat  CIB  is  obviously  bung  up).  If  the  number 
of  retransmissions  is  found  to  be  excessive,  own 
computer  commits  to  ECAS.  If  not,  N(ID)  is 
incremented  to  reflect  the  current  retransmission. 

If  the  coordination  reply  contained  the  threat's 
CIB,  El  and  B(ID)  are  reset.  CM DO DM  is  then 
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checked  to  deteraine  whether  it  is  nail, 
indicating  that  BCAS  is  terminating  advisories  and 
the  coordination  interrogation  was  only  to  infora 
the  target  aircraft  of  this  fact.  If  CHDORN  is 
null,  the  CIR  row  corresponding  to  this  target  is 
deleted,  and  the  logic  is  exited.  If  CHDORH  is 
not  null,  both  own  and  threat's  A  bits  are 
checked.  If  both  are  set,  ATABS  is  responsible 
for  assuring  separation  of  this  pair  and  BCAS  aust 
inhibit  its  advisories.  The  CIR  row  associated 
with  this  threat  is  deleted  and  the  logic  is 
exited,  while  sending  an  'AA'  aessage  ("both  own 
and  threat  are  being  protected  by  ATARS")  to  own 
BCAS  logic.  ATABS  will  subsequently  uplink  a  CIR 
row  for  this  threat. 

If  at  least  one  aircraft  in  this  pair  does  not 
have  its  A  bit  set,  the  threat's  CIR  and  the  BCAS 
provisional  advisory  conplenent  sent  to  the  threat 
in  own's  coordination  interrogation,  are  sent  to 
routine  COHCOHP.  If  COHCOHP  returns  a  value  0,  it 
is  deduced  that  the  threat  rejected  the 
provisional  advisory  coapleaent,  since  the  threat 
will  have  used  an  identical  COHCOHP  logic  to  test 
for  compatibility.  The  aulti-aircraft  logic  HAC 
is  then  called,  and  it  uses  the  threat's  CIR,  own 
CIR  and  own's  track  of  the  threat,  to  select  a  new 
set  of  advisories  which  is  universally  coapatible. 
Upon  return  of  ccntrol  froa  HAC,  another 
coordination  interrogation  is  iaaediately  sent, 
with  the  new  advisory  coapleaent. 

If  COHCOHP  returns  a  value  1,  it  is  deduced  that 
the  threat  accepted  the  advisory  coapleaent.  own 
computer  then  conaits  to  BCAS.  Rhen  exiting  this 
logic,  a  final  copy  of  the  CIR  row  assigned  to  ID 
is  sent  to  the  ECAS  logic. 

Several  auxiliary  functions  have  been  oaitted  froa 
the  preceding  flow  charts  for  the  sake  of  clarity. 
DABS  interrogations  froa  ground  sites  will  contain 
not  only  resolution  advisories  and  A  bits,  but 
also  traffic  advisories  called  Proxiaity  Rarning 
Indicators  (PRI's).  Such  data  on  nearby  target 
aircraft  is  also  available  froa  ECAS,  which  refers 
to  them  as  Intruder  Position  Data  (IPD's).  In 
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order  to  assure  uniqueness  of  traffic  advisories 
on  the  cockpit  display  of  a  BC AS  aircraft,  the 
following  filter  has  been  established.  If  own  A 
bit  is  set,  only  ATABS-originated  PlI's  will  be 
presented  to  the  pilot.  BCAS  originated  IPO's  are 
presented  when  own  A  bit  is  not  set.  An  exception 
is  aade  whenever  BCAS  is  displaying  a  BCAS- 
generated  resolution  advisory  for  a  threat.  This 
is  done  to  eliminate  the  possibility  of  displaying 
resolution  advisories  for  which  no  corresponding 
PRI  display  exists.  BCAS  will  periodically  check 
own  A  bit  (see  Table  C-3-1,  own  'A*  bit  reguest 
■essage) ,  and  display  or  inhibit  the  IPO's  it 
generates. 

Certain  actions  taken  by  the  CIB  controller  should 
also  be  clarified.  Rhen  responding  to  own  BCAS's 
request  for  coordination,  as  when  an  intra- 
computer  message  from  Table  C-3-1  is  received, 
that  request  is  honored  immediately  if  the  CIS  is 
available.  If  the  CIS  is  locked,  the  request  is 
held  in  a  BAIT  state  until  it  becomes  free,  and  is 
then  honored.  This  is  done  in  order  to  free  the 
BCAS  logic  from  the  need  to  periodically  re-issue 
coordination  requests  when  the  CIB  is  unavailable. 
An  endless  loop  in  the  CIB  controller  must  cycle 
throuqh  the  1TACS  variables  associated  with  each 
CIR  row,  in  order  to  delete  rows  that  have  not 
been  updated  recently  enough. 

As  described  in  the  BCAS  collision  avoidance 
algorithms,  cockpit  display  information  can 
originate  from  either  the  BCAS  logic  or  the  ATABS- 
BCAS  interface,  or  both.  These  functions  send 
display  requests  (add  information,  delete 
information,  alter  information)  to  a  stack  called 
the  Display  Bequest  Queue  (see  figure  C-3-5).  An 
activity  called  the  Display  function  accomodates 
these  requests  one  at  a  time,  creating  display 
vectors  which  it  writes  into  the  Display  list. 

The  Display  Driver  program  reads  these  vectors  and 
transforms  them  into  display  commands  for  the 
cockpit  display.  The  details  of  these  operations 
are  described  in  the  BCAS  collision  avoidance 
algorithms  (Appendix  K  in  Volume  III  of  Beference 
3)  . 
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In  this  section,  the  additional  capabilities  that 
the  existing  systeas  would  need  in  order  to 
support  this  interface  are  suaaarized. 


C— 4. 1  Coaaunications 


Various  additional  aessage  types  were  iaplied  in 
the  foregoing  discussion.  This  subsection 
describes  the  reguireaents  for  the  transfer  of 
data  air-to-air  and  air-to-ground. 


In  order  to  identify  an  ATCBES-eguipped  threat 
aircraft,  that  aircraft's  position  and  velocity 
(relative  to  own)  and  Hode-A  code  are  used.  Since 
•rectangular  coordinate  systeas  used  by  different 
coaputers  in  tracking  cannot  be  easily  resolved, 
threat  tracks  are  expressed  in  a  systea  with  the 
subject  aircraft  at  the  origin  (i.e.,  relative 
range,  bearing  and  altitude,  and  their  rates),  A 
data  block  used  to  coaaunicate  this  inforaation  is 
presented  in  Figure  C-4-1.  This  block  is  44  bits 
long.  It  consists  of  the  following  fields:  BB 
(relative  range,  8  kits),  RRB  (relative  range 
rate,  8  bits),  Bfi  (relative  bearing,  7  bits),  BBB 
(relative  bearing  rate,  7  bits)  ,  BZ  (relative 
altitude,  7  bits)  and  BZR  (relative  altitude  rate, 
7  bits).  This  data  block  is  transaitted  in  a  long 
interrogation  when  ATARS  uplinks  a  resolution 
advisory  that  applies  to  an  ATCBES  threat.  (A 
long  aessage  in  the  DABS  protocol  is  112  bits  and 
can  transfer  data  in  general  purpose  fields.  A 
short  aessage  of  56  bits  is  used  when  only 
surveillance  functions  are  perforaed.)  This  long 
aessage  would  iaaediately  follow  a  long  aessage 
which  contains  the  contents  of  the  first  row  of 
the  CIB  for  this  threat.  The  sane  data  block  is 
used  in  a  long  reply  aessage  whenever  a  ECAS 
aircraft  or  the  ground  systea  reads  the  CIB. 


The  aost  coaaon  activity  on  the  uplink  is  for 
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FIGURE  C-4-1 

ATCRBS  THREAT  RELATIVE  TRACK  BLOCK 


AT APS  to  set  the  A  bit  (ATIBS  service  bit)  for 
aircraft  within  the  ATABS  service  zone.  This  east 
be  done  for  each  aircraft  each  scan.  Clearly,  it 
is  desirable  to  do  this  as  a  part  of  the  short 
surveillance  interrogation  or  long  interrogation 
which  is  aade  of  each  aircraft  each  scan.  The 
■ethod  of  aultisite  coordination  described  in 
Appendix  G,  which  provides  for  coaaunication 
between  sites  through  the  transponders,  reguires 
that  four  bits  be  used  in  the  short  surveillance 
interrogation.  These  four  bits  represent  site 
ID's.  Each  site  sets  the  site  ID  bit 
corresponding  to  its  ID  in  the  surveillance 
interrogation  each  scan  for  aircraft  that  are  in 
the  ATARS  service  zone.  The  corresponding  bit  in 
the  site  ID  in  the  CIB  is  then  set.  The  avionics 
maintains  a  timer  for  each  of  the  four  site  ID's 
in  the  CIR.  Rhenever  the  site  ID  bit  is  set  in 
the  surveillance  interrogation,  the  timer  for  that 
ID  is  reset.  If  the  timer  for  one  site  ID  reaches 
a  certain  threshold,  the  avionics  automatically 
resets  that  site  ID  bit  to  zero  in  the  CIB.  Every 
time  the  avionics  receives  a  surveillance  or  long 
interrogation,  the  site  ID  field  in  the  CIB  is 
updated,  all  four  site  ID  bits  are  observed,  and 
if  at  least  one  site  ID  bit  is  set,  the  A  bit  in 
the  CIB  is  set. 

C-4.1.1.2  Dpi ink  of  ATABS  Messages 

In  uplinking  ATARS  resolution  advisories  it  must 
be  possible  to  specify  the  maneuver  that  is  being 
issued  against  each  threat  and  to  transmit  a 
24-bit  DABS  ID  to  identify  each  DABS  threat. 

ATCRBS  threats  must  be  identified  by  the  ATCBBS 
track  block  described  in  Section  C-4.1.  Since  the 
24-bit  DABS  ID's  and  the  resolution  maneuver 
fields  for  two  DABS  threats  could  not  be  contained 
in  one  iong  message,  a  protocol  which  uses  one 
long  message  to  transfer  the  data  pertaining  to 
each  DABS  threat  is  reguired.  The  protocol 
reguires  two  long  messages  (one  containing  the 
maneuver  and  the  Node  A  code,  the  other  containing 
the  ATCRBS  track  block)  to  transfer  data 
pertaining  to  a  single  ATCBBS  threat.  Two  long 
message  types  are  reguired  to  support  this 
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protocol.  The  required  data  is  shown  in  Figure 
C-  h- 2. 


The  first  aessage  type  is  the  resolution  advisory 
message.  It  is  used  to  send  the  resolution 
maneuvers  to  the  CIB  and  to  the  ATABS  display. 

The  LB  bit  is  used  to  infora  the  avionics  that 
this  uplink  is  the  last  uplink  of  inforaation  for 
the  CIB  for  this  scan.  The  CIB  Controller  locks 
the  CIB  when  it  receives  the  first  uplink 
addressed  to  the  CIB  and  keeps  it  locked  until  a 
message  with  LB  =  1  is  received.  To  protect 
against  the  event  when  the  DABS  sensor  is  unable 
to  coaplete  uplink  of  the  CIB  inforaation,  the  CIB 
will  automatically  unlock  a  specified  tiae  after 
being  locked.  If  the  entire  uplink  for  a  coaplete 
scan  is  not  received  by  the  avionics,  any  partial 
inforaation  received  will  be  discarded. 

The  HAH  field  is  a  ten-bit  field  containing  the 
resolution  advisory  generated  by  ATABS  to  protect 
against  a  single  intruder.  It  is  coded  exactly 
like  the  D  field  in  the  CIB  (see  Table  C-2-1). 

The  ID  field  in  the  resolution  advisory  aessage 
contains  the  24-bit  DABS  address  of  the  threat 
associated  with  the  advisory  in  the  HAN  field,  if 
the  threat  has  a  DABS  transponder.  If  the  threat 
is  an  ATCBBS  aircraft,  the  ID  field  contains  the 
node  A  code  of  the  aircraft  and  it  is  understood 
that  the  next  uplink  will  contain  the  ATCBBS  Track 
Block  which  is  used  to  identify  the  threat. 

The  second  ATABS  aessage  type  on  the  uplink  is  the 
ATCBBS  track  block  aessage.  It  is  used  to  uplink 
the  ATCBBS  track  block  described  in  Figure  C-4-1 
when  an  advisory  due  to  an  ATCBES  aircraft  is 
being  uplinked. 

It  is  clear  that  this  protocol  for  ATABS  uplinks 
has  the  flexibility  to  handle  unliaited  numbers  of 
resolution  advisories. 
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FIGURE  C-4-2 

REQUIRED  FIELDS  FOR  ATARS  UPLINK 
OF  CIR  MESSAGES 


C-4.  U  2. 1  aodificatjgns_  to_Suryeillajce_£gEli 


The  ATARS  aultisite  logic  development  reported  in 
Appendix  G  requires  that  the  four  site  IE  bits  in 
the  Cl E  be  downlinked  each  scan.  The  ATARS- BCAS 
interface  requires  that  a  bit  be  downlinked  each 
scan  to  indicate  whether  the  CIB  has  any  conflict 
information  which  should  be  read  via  long  replies. 
It  would  be  desirable  that  all  five  of  these  bits 
be  wade  a  part  of  the  surveillance  reply. 

CzJL.JLlJ^.2 _ Down  lin  kin  g_gi_i^e_CIJ 

ihen  the  CIR  bit  in  the  surveillance  reply 
indicates  that  there  is  CIB  inforaation  to 
downlink,  the  DABS  sensor  must  iaaediately 
schedule  long  downlinks  so  that  the  CIB  can  be 
read  on  the  sane  scan.  The  DABS  sensor  will  send 
another  surveillance  or  long  interrogation  asking 
for  CIB  data  to  be  downlinked.  The  CIB  Controller 
will  lock  the  CIR  and  will  then  cause  the  rows  of 
the  CIR  to  be  read  out,  one  per  long  reply.  The 
content  of  the  CIR  long  reply  is  presented  in 
Figure  C-4-3 . 

A  special  reply  is  required  to  indicate  "CIB 
Busy".  IR  is  a  last  row  indicator.  It  is  set  to 
one  when  the  last  row  is  being  sent  froa  the  CIR. 
Otherwise  it  is  zero.  Hhen  an  ATCRBS  aircraft  is 
represented  in  the  CIB,  the  TID  field  will  be 
filled  with  the  Mode  A  code.  The  remaining  fields 
are  siaply  copies  of  the  information  in  the  CIR. 
The  A  and  SID  fields  would  be  duplicated 
unnecessarily  in  aultiaircraft  encounters  but  it 
is  convenient  to  include  thea  in  the  CIB  intent 
row  message  and  there  is  no  hara  in  the 
duplication. 

The  aechanisa  for  downlink  of  CIB  inforaation 
should  be  made  completely  independent  of  that  for 
the  downlink  of  ATC-related  or  other  inforaation. 
This  is  desirable  because  BCAS  units  nay  also 
request  readout  of  the  CIR,  and  the  long  downlink 
protocol  could  become  scrambled  if  two  long 
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FIGURE  C-4-3 

CONTENT  OF  CIR  REPLY  MESSAGES 


downlink  transactions  were  in  progress 
si ault aneously.  A  separate  bit  in  the 
surveillance  reply  fron  the  bit  leaning  that  a 
long  downlink  aessage  is  waiting  should  be 
provided  to  indicate  that  the  CIB  has  information 
to  be  downlinked.  A  counterpart  to  the  bit  in  the 
interrogation  which  indicates  successful  receipt 
of  the  previous  long  downlink  should  also  be 
provided. 

The  entire  seguence  involved  in  downlinking  the 
CIR  is  now  illustrated.  Suppose  the  DABS  sensor 
has  no  long  aessage  to  uplink.  It  lakes  its  first 
interrogation  of  the  aircraft  in  a  new  scan  with  a 
surveillance  interrogation.  The  CIB  bit  indicates 
that  there  is  information  to  be  downlinked.  The 
sensor  sends  another  interrogation  (while  the 
aircraft  is  still  within  the  antenna  bean)  asking 
for  CIR  data.  The  avionics  locks  the  CIB  on 
receipt  of  this  interrogation  and  returns  the 
first  row  of  the  CIR.  Assuie  that  there  are  three 
rows  in  the  CIB.  Then  the  LR  bit  in  the  reply 
will  be  zero.  If  the  ground  receives  this  reply 
successfully,  it  will  lake  another  interrogation 
indicating  successful  receipt  of  the  previous 
downlink  and  asking  for  the  next  row.  The 
avionics  will  respond  with  the  second  row.  If  the 
qround  should  fail  to  receive  one  reply,  it  would 
indicate  this  in  the  next  interrogation,  and  the 
avionics  would  repeat  the  previous  transmission, 
when  the  avionics  is  sending  the  last  row  it  sets 
LR  =  1  in  the  reply.  The  ground,  if  it 
successfully  receives  this  reply,  transmits  one 
last  interrogation  indicating  success  of  the 
previous  downlink.  The  avionics  will  then  unlock 
the  CIB  and  will  reply  with  a  surveillance  reply. 

grj- 1. 3 _ Ajr-torjir ,  Bgss&ges 


The  first  air-to-air  transmission  to  be  discussed 
is  the  coordination  interrogation  which  is  emitted 
by  a  BCAS  and  is  addressed  to  a  threat  aircraft 
(when  the  threat  has  at  least  ATARS  capability). 
This  interrogation  must  convey  the  ID  of  the 
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sender,  the  sender's  A  bit,  and  the  BCAS  advisory 
complement,  which  is  used  both  in  ECAS 
coordination  and  as  an  advisory  selection 
constraint  in  subsequent  (but  time-overlapping) 
conflicts.  This  data  involves  enough  bits  that  a 
BCAS  unit  will  be  required  to  transmit  a  long 
interrogation  fcr  coordination  with  a  threat.  The 
ID  and  A  bit  of  the  sender  and  the  ECAS  advisory 
complement  can  be  easily  fit  into  a  long  message, 
using  the  intent  codes  listed  in  Table  C-2-1  for 
the  BCAS  advisory  complement.  For  normal  active 
ranging,  BCAS  can  use  the  short  interrogation. 

CribJU.i.2 _ BCL§_eoordination_Ee£lj 

The  BCAS  or  ATABS  avionics  replies  to  a 
coordination  interrogation  with  a  series  of  long 
replies  that  transmits  the  contents  of  the  CIB. 

The  same  protocol  described  in  Section  C-4.1.2.2 
is  used.  At  least  one  long  reply  must  be  made  to 
the  coordination  interrogation  even  though  there 
is  no  conflict  information  in  the  CIB.  The  reply 
is  still  required  in  order  to  convey  the  value  of 
the  A  tit  to  the  requesting  BCAS. 

C zlL.2 _ Changes. tg  the^ jlAlj_ Ground _Algg£jthjs 

The  following  changes  to  the  ATABS  ground 
algorithms  are  required  to  implement  the  ATABS- 
BCAS  interface.  The  actual  detection  and 
resolution  process  within  ATABS  is  nearly 
unchanged.  The  only  modification  is  that  ATABS 
must  check  to  see  if  ECAS  has  already  taken 
responsibility  for  a  pair  before  generating 
resolution  advisories  for  that  pair.  In  normal 
situations,  BCAS  will  not  take  responsibility  if 
both  aircraft  are  within  ATABS  coverage.  However, 
it  is  possible  that  at  the  tine  of  conflict 
detection,  one  of  the  aircraft  was  below  the  DABS 
coverage  floor  but  was  seen  by  BCAS.  If  this 
aircraft  pops  up  into  ATABS  coverage  during  the 
resolution,  ATABS  is  not  permitted  to  generate 
advisories  on  its  own,  but  must  accept  the 
advisoriess  generated  by  BCAS  fcr  that  pair. 

A  surveillance  coverage  floor  lap  must  be  added  to 
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ATARS.  When  a  ECAS  aircraft  is  near  the  floor  of 
coverage,  ATARS  ceases  sending  the  aessage  to  BCAS 
that  prevents  ECAS  active  interrogations.  ECAS 
aay  then  begin  to  provide  protection  against  pop- 
ups  or  to  provide  protection  as  the  ECAS  aircraft 
drops  below  the  floor  of  coverage.  In  addition, 
ATARS  Bust  maintain  a  service  zone  nap  and  aust 
provide  logic  based  on  this  nap  for  aanaging  the 
site's  ID  bit  in  the  transponder. 

The  capability  must  be  added  to  ATARS  to  receive 
the  CIR  information  on  the  downlink.  This 
information  is  transmitted  on  the  downlink  via 
multiple  long  downlinks  each  scan  during  the 
conflict.  ATARS  must  search  the  threat  ID's  from 
the  downlink  and  correlate  them  with  conflict 
table  entries  in  the  ATARS  data  base.  If  a 
conflict  is  indicated  by  the  downlink  that  is  not 
found  in  the  ATARS  pair  records,  a  new  pair  record 
must  be  created  for  that  conflict  and  added  to  the 
ATARS  data  base. 

C- 4. 3 _ Requirements  on  the  CABS  Sensor 

In  order  that  the  entire  CIB  be  read  in  one 
antenna  beamwidth,  the  DABS  sensor  algorithms  must 
manage  the  long  message  protocol  for  downlinking 
the  CIR.  The  sensor  aust  recognize  that  the  CIR 
bit  is  set  in  the  surveillance  reply  and  aust 
immediately  schedule  interrogations  that  elicit 
long  replies  froa  the  CIR.  The  bit  indicating 
success  or  failure  of  the  previous  downlink  aust 
be  set  appropriately  in  each  interrogation.  The 
sensor  must  recognize  the  LR  (last  row)  bit  in  the 
long  reply  and  send  one  final  interrogation  which 
unlocks  the  CIR.  The  sensor  aust  also  recognize 
the  "CIR  Busy"  reply  and  aust  continue  to  schedule 
downlinks  froa  the  CIR  until  readout  has  been 
successful. 


C-  4.  4 
ATARI 
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The  aajor  reguireaent  on  the  ATARS  display,  or  on 
the  display  in  a  BCAS  aircraft  that  is  used  to 
present  either  BCAS  or  ATARS  advisories,  is  that 
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the  display  aust  include  the  CIB  and  logic  to 
update  it  based  upon  inputs  froa  A1ABS  or  another 
BCAS,  or  upon  inputs  froa  own  ECAS.  Bhen  the  CIB 
contains  conflict  inforaation,  it  aust  be 
transaitted  to  the  ground  on  every  scan,  or  to  the 
other  ECAS  whenever  a  ECAS  coordination 
interrogation  is  received  (this  happens  once  per 
BC AS  cycle  for  the  duration  of  the  conflict). 

The  CIB  consists  of  one  bit  indicating  that  own 
aircraft  is  within  ATABS  coverage,  four  bits 
indicating  which  sites  are  providing  ATABS  service 
for  own  aircraft,  and  rows  of  data  containing 
inforaation  about  other  threats  in  conflict  with 
own  aircraft.  Each  ATABS  ground  site  sets  the  one 
of  the  four  site  ID  bits  corresponding  to  its  ID 
every  scan.  Each  tiae  a  surveillance 
interrogation  is  received  froa  the  ground,  the  CIB 
logic  sets  the  single  ATABS  coverage  bit  if  any 
one  of  the  four  site  ID's  is  set. 

A  DABS  threat  has  one  row  in  the  CIB.  An  ATCBBS 
threat  has  two.  The  logic  in  the  display  aust  be 
able  to  correlate  threat  ID's  from  the  incoaing 
data  with  ID's  already  existing  in  the  CIB.  Bhen 
it  finds  a  natch,  it  must  update  the  appropriate 
row  or  rows.  It  aust  delete  a  row  on  connand  froa 
ATABS  or  own  BCAS  and  oust  be  able  to  recognize 
that  a  row  does  not  exist  for  a  particular  ID  and 
create  a  row  for  it.  In  making  this  search  for 
ATCBBS  ID's  it  aust  be  able  to  compare  a  set  of 
relative  range,  bearing,  altitude,  range  rate, 
bearing  rate,  and  altitude  rate  data  with  that 
already  existing  in  the  CIB. 

The  display,  before  accepting  incoaing  data  and 
incorporating  it  into  the  CIB,  aust  check  the 
advisories  in  the  incoaing  data  for  compatibility 
with  all  other  advisories  already  existing  in  the 
CIB.  It  does  this  by  indexing  a  matrix  of  bits 
with  the  incoaing  advisory  and  an  existing 
advisory  from  the  CIB.  If  the  advisory  is 
incompatible,  the  incoaing  data  is  ignored  and  is 
not  added  to  the  CIB. 

The  CIB  must  also  have  a  lockout  capability  that 
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prevents  two  different  requests  for  operation  on 
the  CIB  frow  being  honored  simultaneously.  For 
example,  own  BCAS  cannot  change  the  CIB  during  the 
period  that  the  ground  ATARS  algoritha  is  in  the 
process  of  reading  out  the  CIB  with  aultiple  long 
downlinks.  The  lockout  logic,  however,  aust  have 
a  feature  to  preempt  the  lockout  in  the  special 
case  when  the  CIR  is  locked  because  own  BCAS  has 
aade  a  coordination  interrogation  of  a  second 
BCAS,  and  has  also  received  a  coordination 
interrogation -from  that  BCAS  before  receiving  the 
reply  to  own's  interrogation.  In  this  case,  the 
lockout  is  preeapted  if  own  DAES  IE  is  a  higher 
order  ID  than  the  CABS  ID  of  the  other  BCAS. 

The  CIB  aust  include  a  protocol  for  managing  the 
transmission  of  CIB  data.  It  must  recognized  by  a 
zero  value  of  a  particular  bit  in  the 
interrogation  that  a  previous  long  reply  was  not 
received  by  the  ground  and  must  be  able  to  repeat 
that  long  reply.  It  must  sense  the  proper  bits  in 
the  interrogations,  and  lock  the  CIR,  unlock  the 
CIR,  or  reply  with  a  "CIR  Busy"  message  as 
appropriate. 

The  ATARS  display  must  be  changed  to  accept  the 
new  ATARS  uplink  formats. 

C- 4..  5  Requirements  on  the  DABS  Transponder 

Every  DABS  transponder  which  is  to  be  used  with  an 
ATARS  or  a  combined  ATARS-BCAS  display  must  have 
the  capability  to  transmit  long  replies. 

C- 4. 6 _ Requirements  on  the  BCAS  logic 

Either  the  active  ECAS  or  the  Full  ECAS  must  have 
provision  to  terminate  routine,  active 
surveillance  interrogations  under  command  from  the 
ground  ATARS  algorithms.  ATABS  will  permit  active 
interrogations  only  when  the  ECAS  aircraft  is  near 
the  boundary  of  ATARS  coverage.  The  squitter 
lockout  bit  in  the  current  surveillance 
interrogation  will  be  used  to  inhibit  active 
interrogations.  Hhen  this  bit  is  set,  the  DABS 
transponder  on  the  BCAS  aircraft  will  refrain  from 
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■aking  sguitter  replies  and  the  BCAS  will  refrain 
froa  aaking  active  interrogations. 

Flow  charts  for  the  specific  logic  to  iaplenent 
the  IT IBS— BCiS  interface  within  ECAS  have  been 
developed.  This  logic  specifies  the  BCAS-ECAS 
coordination  logic  reguired  to  sake  the  ATABS-BCAS 
interface  work.  This  logic  regaires  that  BCAS  be 
able  to  sake  repeated  interrogations  to  receive 
several  long  replies  in  guick  succession  froa  an 
ATARS  or  a  BC AS-equipped  intruder.  This 
capability  is  used  by  own  BCAS  to  read  the  CIB 
froa  another  BCAS  or  ATABS  intruder. 

The  BCAS  threat  logic,  for  positive  resolution 
advisories  that  are  generated  because  of  an  ATCBBS 
intruder.  Bust  use  look-ahead  tiaes  that  are  less 
than  those  used  by  ATABS  in  the  sane 
circuastances.  This  will  ensure  that  ATABS  will 
noraally  be  the  systea  to  generate  advisories  for 
encounters  against  ATCBBS  intruders  as  well  as  for 
encounters  against  ATABS  or  BCAS-eguipped 
aircraft. 
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APPENDIX  D 


DEVELOPMENT  OF  AN  INTERFACE  BETWEEN  ATARS 
AND  TERMINAL  CONFLICT  ALERT 


W.  D.  Love 
H.  C.  Strunz 


P-1.  TMT^OPnCTiON 

ibis  appendix  describes  development  of  the 
interface  between  Automated  Traffic  Advisory  and 
Resolution  Service  (ATARS)  and  Terminal  Conflict 
Alert.  Terminal  Conflict  Alert  is  currently  in 
operation  at  a  number  of  terminal  Air  Traffic 
Control  (ATC)  facilities  with  Automated  Radar 
terminal  System  (ARTS) -III  equipment.  After  ATARS 
has  been  installed  at  a  facility  with  Terminal 
Conflict  Alert,  there  would  be  a  great  lifclihood 
tha*  both  systems  would  alert  in  a  conflict 
situation.  If  a  consistent  set  of  logic  and  a 
consistent  set  of  operational  procedures  were  not 
in  effect  for  the  twg  systems,  the  resulting 
alerts  could  be  confusing  and  counterproductive. 

It  was  the  purpose  of  this  study  to  develop  an 
interface  between  ATARS  and  Terminal  Conflict 
Alert  that  would  provide  this  consistency. 

The  first  step  in  this  activity  consisted  of 
exercising  the  Terminal  Conflict  Alert  logic  and 
♦he  ATARS  resolution  advisory  logic  with 
recordings  of  live  traffic  data.  This  study 
suggested  a  significant  degree  of  incompatibility 
between  the  two  functions  in  that  either  system 
might  be  first  to  alarm  in  any  particular 
encounter.  As  a  result,  an  investigation  was 
conducted  of  the  feasibility  of  incorporating  a 
Conflict  Alert  emulator  into  the  ATARS  logic  ^o 
provide  more  consistency  in  the  sequencing  of 
alerts  from  the  two  systems.  If  this  could  be 
done,  then  it  would  be  possible  to  remove  Terminal 
Conflict  Alert  from  ARTS  and  to  provide  the  alerts 
to  the  controller  from  the  ATARS  system  after  the 
Discrete  Address  Beacon  System  (DABS)  and  ATARS 
had  been  installed  at  a  terminal  location. 

The  purpose  of  the  investigation  resulting  from 
this  first  step  was  to  replace  the  current 
controller  alert  module  of  ATARS  with  a  Conflict 
Alert  emulator,  ma+ch  its  performance  as  closely 
as  possible  «-o  that  of  terminal  Conflict  Alert, 
and  run  a  variety  of  computer-simulated  aircraft 
encounters  to  compare  the  performances  of  the  two. 
It  was  also  a  goal  to  develop  resolution  advisory 
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logic  for  ATARS,  consistent  with  Conflict  Alert, 
that  would  retain  as  much  of  the  original  logical 
structure  of  A TARS  as  possible.  An  approach  to 
providing  a  Conflict  Resolution  service  to  the 
controller  from  the  ATARS  systea  also  evolved  froa 
this  study. 

To  evaluate  the  fidelity  of  the  eaulator,  the  full 
Terminal  Conflict  Alert  algoritha  and  the  eaulator 
were  prograaaed,  and  a  Bonte  Carlo  siaulation 
program  was  used  to  directly  coapare  the 
perforaance  of  the  two.  The  siaulated  encounters 
included  a  variety  of  speeds  and  angles  of 
approach,  and  included  encounters  with  straight 
flight  and  with  turning  maneuvers. 
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D-2.  A**1  HP S- TFPHIN AL  CONFLICT  ALERT  INTERACTION 

D- 2. 1 _ Interaction  During  Visual  Weather 

Conditions 

An  analysis  was  performed  of  the  interaction 
between  ATAPS  and  terminal  Conflict  Alert  using 
recordings  of  live  traffic.  In  this  study,  the 
time  of  generation  of  ATAPS  advisories  and  the 
Mme  of  ■’’erminal  Conflict  Alert  warnings  were 
noted  when  both  systems  were  exercised  with  a 
common  aircraft  encounter  test  set.  This  test  set 
consis+ed  of  eight  hours  of  data  obtained  from 
APTS  III  extractor  tapes.  (Peference  1  explains 
how  this  data  was  collected  and  reduced.)  Only 
aircraft  controlled  by  ATC  are  included  in  the 
samples.  All  samples  were  taken  during  visual 
weather  conditions.  The  data  represents  air 
traffic  at  three  airports:  Washington  National  (2 
hours) ,  Miami  International  (4  hours) ,  and  Chicago 
0*Hare  (2  hours). 

There  are  three  alert-generating  modules  in 
Terminal  Conflict  Alert:  LINCON,  NEBAMS,  and 
PROCON.  LINCON,  the  most  significant,  utilizes 
linear  prolection  to  establish  vertical  and 
horizontal  conflict  time  intervals.  If  these 
intervals  overlap,  the  earliest  time  in  the 
overlap  region  is  the  time  of  violation  and  this 
is  compared  with  a  look-ahead  time  threshold  to 
determine  potential  conflicts.  BFBABS  is  a 
maneuver-sensitive  module.  Cross-track  deviations 
are  utilized  to  indicate  when  a  maneuver  is  in 
progress  in  the  horizontal  plane.  Various 
separation  and  flight  geometry  criteria  are  then 
used  to  predict  potential  conflicts.  A  vertical 
acceleration  estimate  is  used  +o  determine  when 
vertical  maneuvers  are  present.  When  they  are 
present,  the  vertical  acceleration  is  also  used  to 
predict  conflicts.  PROCON  generates  alerts  by 
comparing  current  horizontal  and  vertical 
separation  t0  fixed  thresholds.  It  also  has  a 
fea+ure  which  tests  for  a  predicted  conflict  in 
one  specific  type  of  turning  encounter. 

The  Conflict  Alert  algorithm  employed  reflects  the 
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logic  and  parameters  in  use  at  Houston  as  of 
January  1978.  It  is  described  in  Reference  2. 

The  ATARS  version  utilized  included  changes  that 
had  been  recommended  prior  to  the  same  date.  Only 
minor  changes  to  correct  flow  chart  errors  or  to 
adapt  the  algorithms  to  the  current  test 
environment  were  made  in  programming  Conflict 
Alert.  There  are  two  areas  where  the  tested 
algorithm  employs  these  changes.  The  first 
concerns  a  function  in  Conflict  Alert  which  sets 
the  turn  bits  (left  or  right)  for  tracked 
aircraft,  based  on  tracked  velocity  from  two  scans 
earlier  and  current  reported  position.  In  the 
tested  nodule,  velocities  and  positions  provided 
by  +he  data  reduction  process  were  employed  rather 
than  the  outputs  of  the  ARTS  tracker.  Secondly, 
the  ARTS  tracker  nornally  provides  an  estimate  of 
vertical  acceleration  for  each  aircraft,  based  on 
various  criteria.  Tn  the  tested  algorithm, 
vertical  acceleration  was  simply  computed  from  the 
change  in  tracked  vertical  velocity,  in  one  scan. 
Table  D-2-1  shows  the  values  of  the  significant 
Conflict  Aler*  parameters. 

The  version  of  ATARS  that  was  studied  was 
programmed  from  Reference  3  with  a  few 
modifications.  All  aircraft  were  treated  alike. 

No  parameter  modifications  for  different  types  of 
encounters  were  used.  Table  D-2-2  presents  the 
ATARS  parameters  that  were  different  from  those  in 
Reference  3.  These  modifications  to  the  ATARS 
parameters  were  found  to  be  necessary  to  avoid 
undue  interference  with  normal  ATC  procedures 
inside  the  Terminal  Control  Area  (^CA)  boundaries 
in  visual  weather  conditions.  Reference  ft  reports 
on  the  study  that  made  these  recommendations  for 
changes. 

It  was  found  that  26  aircraft  encounters  in  the 
eight  hours  of  data  produced  Conflict  Alert 
warnings.  Four  of  these  elicited  positive  ATARS 
advisories  and  three  others  produced  negative 
ATARS  advisories.  With  Conflict  Alert,  only  one 
parameter  set  was  used  and  ■♦■his  was  the  set 
appropriate  for  areas  outside  the  immediate 
airport  area  (area  type  III) .  Conflict  Alert 
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SIGNIFICANT  CONFLICT  ALERT  PARAMETER  VALUES 


PARAMETER 

VALUE 

LKHA 

40 

SEC. 

DZIMQ 

275 

FT. 

ASEQ 

375 

FT. 

PSEQ 

1.2 

NMI . 

LSEQ 

1.2 

NMI. 

LMDIMQ 

0.5 

NMI. 

LDAQ 

0.3 

NMI. 

TOCIMQ 

25 

SEC. 

TOMIMQ 

25 

SEC. 
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employs  other  smaller  paraaeters  in  area  types  I 
and  II  which  are  areas  immediately  surrounding  the 
airport.  Thus,  the  26  alerts  represent  an  upper 
bound  on  the  number  of  alerts  that  Conflict  Alert 
would  have  generated  in  actual  operation  at  these 
three  airports. 

’or  those  aircraft  encounters  which  produce  both 
ATAPS  advisories  and  Conflict  Alert  warnings,  the 
lead  time,  IT,  is  defined  as  follows: 

LT  =  Tine  of  ATAPS  advisory  minus  tine  of 
Conflict  Alert  warning. 

Thus,  IT  is  positive  if  Conflict  Alert  generates  a 
warning  before  ATAPS  generates  an  advisory.  The 
lead  times  associated  with  the  four  ATAPS  positive 
advisories  were  -14,  3,  0  and  28  seconds.  The 
lead  times  for  ATAPS  negative  advisories  were  0, 

2,  and  25  seconds.  For  collision  courses  in  which 
there  is  no  maneuvering,  one  would  expect  lead 
times  on  the  order  of  20  seconds. 

two  of  the  four  encounters  which  produced  positive 
advisories  are  shown  in  Figures  D-2-1  through 
D-2-3.  Figure  D-2-1  shows  the  X-Y  profiles  of  the 
+wo  aircraft  involved  in  the  encounter  that 
produced  +  he  -14  second  lead  time.  Figure  D-2-2, 
which  shows  the  plot  of  vertical  separation  vs. 
horizontal  separation  as  the  encounter  develops, 
indicates  that  the  aircraft  are  generally 
separating  vertically  while  closing  horizontally. 
ATAPS  produces  a  positive  advisory  at  time  665 
seconds.  (Time  is  measured  in  seconds  from  the 
beginning  of  each  one-hour  sample  of  data.)  The 
linear  prolection  module  of  Conflict  Alert 
(LINCOfl)  generates  one  isolated  request  for  an 
alert  at  time  6"M  seconds,  but  since  this  logic 
requires  three  requests  on  five  successive  scans 
to  generate  an  alert  to  the  controller,  no  alert 
was  generated.  The  present  separation  module  of 
Conflict  Alert  (PPOCON)  generates  an  alert  to  the 
controller  at  time  6^9  seconds.  The  LINCON 
portion  of  the  Conflict  Alert  logic  prolects  the 
vertical  separation  into  the  future  using  current 
vertical  rates  to  determine  if  the  aircraft  will 
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FIGURE  D-2-2 

VERTICAL  VS.  HORIZONTAL  SEPARATION  FOR  ENCOUNTER 
WITH  NEGATIVE  LEAD  TIME 


be  adequately  separated  vertically  during  the  tiae 
period  when  they  are  in  close  proximity 
horizontally.  This  logic  resulted  in  a  delayed 
alert  froa  Conflict  Alert. 

Figure  D-2-3  shoas  the  X-Y  plot  for  the  encounter 
that  produced  a  lead  tine  of  zero.  Both  an  alert 
froa  Conflict  Alert  and  a  positive  advisory  froa 
ATARS  occurred  at  tiae  2205  seconds.  Because  of 
*he  turn  of  aircraft  BA2561,  the  tiae  to  closest 
approach  (or  the  tau  approxiaation  in  the  case  of 
ATA”S)  calculated  by  both  systens  dropped  rapidly 
in  a  nonlinear  way.  In  addition,  the  three-out- 
of-five  requirement  of  Conflict  Alert  resulted  in 
an  additional  delay  in  the  alert.  (Alert 
conditions  aust  be  satisfied  on  three  of  five 
consecutive  scans  before  a  warning  is  generated  by 
■•■he  LINCON  nodule  of  Conflict  Alert.)  These  two 
conditions  caused  the  alerts  froa  both  systems  to 
occur  at  the  same  tiae. 

Fven  though  this  encounter  test  set  is  very  small, 
there  are  two  points  of  interest: 

a)  •’’here  are  substantially  lore  Conflict 
Alert  warnings  than  ATARS  resolution 
advisories  generated  by  the  traffic  sample. 

b)  Those  encounters  which  induce  both 
advisories  from  ATARS  and  warnings  from 
Conflict  Alert  display  considerable 
dispersion  of  their  lead  times;  even  inverted 
(negative)  lead  times  occur. 

There  are  a  number  of  factors  which  account,  in 
part,  for  the  above  findings.  First,  the  larger 
number  of  alerts  from  Conflict  Alert  is  expected 
because  both  the  lookahead  time  is  greater  (40 
seconds  compared  to  30  seconds)  and  the  horizontal 
protection  distance  is  greater.  ATARS  uses  a 
modified  tau  calculation  as  a  time  criterion  for 
an  alert.  The  modification  distance  in  the  tau 
formula  is  comparable  in  function  to  the 
horizontal  protection  distance  in  the  Conflict 
Alert  calculations.  The  modification  distance  in 
ATAPS  is  a  function  of  the  speeds  of  the  aircraft 
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involved  in  the  conflict.  For  typical  speeds 
found  in  the  TCA's,  it  has  a  value  of  0.25  nni. 
’’’his  conpares  to  a  value  of  1.2  nai  for  the 
horizontal  protection  distance  in  Conflict  Alert. 

Conflict  Alert  and  ATAPS  were  developed 
independently.  As  a  result,  there  are  several 
areas  in  which  considerably  different  logic  is 
used.  The  various  thresholds  that  are  utilized  in 
the  two  systems  are  therefore  not  always  directly 
comparable. 

Another  fac+or  which  limits  a  priori 
Dredictabi  li  +  y  of  •'■he  lead  time  is  +he  fact  that 
both  svs+ems  involve  linear  protection  as  the 
primary  means  of  establishing  conflict. 
Consequently,  traffic  composed  of  maneuvering 
aircraft  will  often  have  shorter  lead  tines  than 
traffic  in  linear  notion.  This  effect  will  thus 
be  particularly  noticeable  in  terminal  areas.  In 
addition  to  the  fact  that  *he  linear  projections 
are  not  directly  comparable,  there  is  a  further 
complication  in  the  different  nanners  in  which 
vertical  conflict  situations  are  processed. 

Although  in  this  study  no  tracking  was  performed 
by  either  ATARS  or  Conflict  Alert  (the  positions 
and  velocities  produced  by  the  data  reduction 
process  were  used  directly) ,  in  the  real 
applica*ion  additional  dispersion  in  lead  tine 
could  be  produced  by  the  fact  that  ATAPS  and 
Conflict  Alert  would  be  using  different  trackers. 

D- 2^2 _ Interaction  Purina  Instrunent  Weather 

conditions 


When  visual  weather  conditions  exist  in  the 
terninal  area,  nany  controlled  aircraft  are 
operating  on  Visual  Flight  Rules  (VFR)  flight 
plans,  and  sone  aircraft  operating  according  to 
Instrument  Flight  Rules  (IFR)  are  cleared  to 
naintain  visual  separation.  Under  these 
circunstances,  no  well-defined  separation 
standards  are  applied  and  relatively  close 
separations  between  aircraft  occur  routinely. 

These  close  separations  and  visual  operations  nake 
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the  problem  of  developing  an  interface  between 
ATAFS  and  Conflict  Alert  a  challenging  one,  as  is 
evident  froa  the  preceding  section.  However,  when 
instrument  weather  conditions  exist  and  all 
aircraft  aust  be  controlled  by  a  controller  who  is 
working  to  well-defined  radar  separation 
standards,  very  little  interaction  is  noticed. 

Three  hours  of  data  collected  during  instruaent 
weather  conditions  were  processed  in  the  sane 
manner  described  in  Section  D-2. 1.  Ho  ATAFS 
positive  advisories  were  generated  by  this  data. 
The  saae  ATAFS  logic  and  parameter*  described 
above  were  also  exercised  via  real-time  ATC 
simulations  in  which  IFF  separation  standards  were 
applied.  For  eight  hours  of  simulated  parallel 
runway  operations  at  Chicago  O' Hare  airport,  no 
positive  advisories  were  issued.  Results  of  these 
simulations  are  presented  in  Reference  4. 


A  Conflict  Alert  emulator  which  would  aatch  the 
operation  of  the  Conflict  Alert  logic  as  closely 
as  possible,  was  to  be  developed  for  use  within 
the  ATAPS  algorithm.  This  emulator  was  to  be  the 
basis  for  an  integrated  ATAPS  advisory  and 
controller  alert  logic  which  would  alleviate  soie 
of  the  problems  indicated  in  Section  D-2.1. 

Section  D-3  presents  the  Conflict  Alert  emulator 
and  shows  how  its  alert  tines  compare  to  those  of 
Conflict  Alert. 

P-3. 1 _ Description 

Figure  D-3-1  is  a  flowchart  of  the  Conflict  Alert 
emulator  test  nodule.  It  directly  replaces  the 
controller  alert  filter  and  controller  alert 
processing  nodules  in  ATARS  and  applies  to  IFB/IFR 
encounters  in  terminal  airspace.  Slow-closing 
tests  are  made  in  both  the  horizontal  and  vertical 
dimensions,  based  upon  the  relative  aircraft 
velocities  in  these  dimensions.  In  cases  where 
the  computed  velocities  show  a  significant  closing 
rate,  a  tau  threshold  is  calculated  which  gives 
approximately  a  40-second  warning  of  the  predicted 
violation  of  a  horizontal  separation  criterion. 

In  slow-closing  or  diverging  cases,  a  check  is 
fcade  to  determine  whether  the  separation  criterion 
has  already  been  violated.  If  the  calculations 
predict  a  violation  of  separation  criteria  in  both 
dimensions  within  the  next  40  seconds,  the 
controller  alert  flag  (CAFLG)  is  set.  If  this 
flag  has  been  set  on  M  of  the  last  N  scans  (where 
N  is  the  size  of  the  sliding  window) ,  then  the 
enulator  sliding-window  logic  issues  a  controller 
alert. 

P-3.  2 _ Results 


D- 3. 2.  1 _ Sliding  Window  Logic 

Numerous  computer  runs  were  made  early  in  the 
investigation  using  various  window  sizes  for  the 
controller-alert,  sliding-window  logic.  The  best 
results  were  obtained  with  a  three-out-of-five 
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FIGURE  D-3-1 

CONFLICT  ALERT  EMULATOR  TEST  MODULE 


logic,  *he  same  as  used  by  the  priaary  module  of 
Conflict  Aler*.  The  standard  of  comparison  was 
the  overall  difference  (in  scans)  between  the 
issuance  of  warnings  by  the  emulator  and  by 
Conflict  Alert  for  the  sane  sets  of  encounters. 
Parly  results  showed  the  three-out-of-f ive  logic 
to  be  a  distinct  improvement  over  the  two-out-of- 
three  logic.  In  using  the  three-out-of-f ive  logic 
rather  than  ■►he  two-out-of -three  logic  in  432 
encounters  at  various  speeds,  the  standard 
deviation  of  the  difference  in  alert  tines  between 
Conflict  Alert  and  the  emulator  was  smaller  by 
0.36  scan,  and  the  number  of  identical  performance 
encounters  was  56%  greater.  Based  upon  these 
early  results,  it  was  decided  to  retain  the  three- 
out-of-five  sliding-window  logic  in  all  further 
tes+s  of  the  emulator. 

Q-3.  2.  2 _ Final  Results 

during  a  series  of  computer  test  runs,  adlustments 
were  made  in  the  emulator  parameters  and  logic  in 
order  to  match  its  alert  tines  as  closely  as 
possible  to  those  of  Terminal  Conflict  Alert.  The 
values  finally  selected  for  the  emulator 
parameters  are  shown  in  Pigure  D-3-1.  The  final 
results  of  640  simulated  encounters  are  shown  in 
the  histograms  of  Figures  D-3-2  through  D-3-5  and 
Table  D-3-1.  In  these  simulations,  both  aircraft 
were  always  in  level  flight,  so  that  only  the 
horizontal  features  of  the  logic  were  being 
investigated.  The  nominal  aircraft  speeds  are 
indicated  by  the  name  of  the  simulation  file.  For 
example,  A100250  indicates  encounters  between  a 
100-knot  aircraft  (aircraft  number  1)  and  a 
250-knot  aircraft  (aircraft  number  2),  while 
A100100  indicates  encounters  between  two  100-knot 
aircraft.  Note  that  for  simulation  files  A100250 
and  A250100,  20  of  the  97  encounters  indicated  on 
the  histograms  are  turning  encounters  where 
aircraft  number  2  turns  toward  aircraft  number  1. 
Lead  time  is  defined  here  as  the  time  of  the 
Conflict  Alert  warning  minus  the  time  of  the 
emulator  warning  (in  scans).  For  instance,  if 
Conflict  Alert  issues  a  warning  two  scans  before 
►he  emulator,  the  lead  time  is  -2. 
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LEAD  TIME  (SCANS) 


FIGURE  D-3-5 

HISTOGRAM  OF  LEAD  TIMES  FOR  SIMULATIOAN  FILE  A250100 


As  Table  P-3-1  shows,  the  emulator  issued  a 
warning  wi*hin  one  scan  of  Conflict  Alert  in  97.3* 
of  all  cases.  The  +»o  algorithms  were  never  more 
than  two  scans  apart.  The  standard  deviation  of 
♦he  lead  time  was  less  than  0.6  scan.  There  were 
a  few  simulated  encounters  (14)  which  elicited  no 
warning  from  either  algorithm.  However,  in  every 
case  where  a  warning"  was  given,  it  was  given  by 
both  algorithms. 

On  *he  basis  of  these  simulations  it  is  concluded 
♦ha*  the  horizontal  )>ortion  of  the  Conflict  Alert 
emulator  closely  matches  the  behavior  of  Conflict 
Alert.  Verification  of  the  vertical  portion  of 
♦he  logic  has  not  yet  been  conducted. 
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P-4.  NFW  H*RPS  LOGIC  FOB  GEMEHHTIOW  OF 
M>VT  SOPTES 

D- 4 . 1  Descript  ion 


once  the  emulator  was  operating  satisfactorily,  a 
modification  of  the  AT&RS  logic  was  incorporated 
*o  use  a  variable  tau  threshold  for  IFR/IFS  and 
TP/VFR  enqounters.  The  flowcharts  of  Figures 
D-4-1  and  D-4-2  show  the  detection  logic  for 
with  the  new  modifications.  These  flowcharts 
replace  Figures  5-1”*  and  *5-16,  respectively,  of 
Reference  3. 


The  new  logic  generates  thresholds  for  advisories 
which  are  closely  related,  within  limits,  to  the 
emulator  thresholds.  *0  maVe  *his  possible,  i* 
was  necessarv  to  use  separa+e  vertical  and 
horizontal  thresholds.  Thus,  for  each  type  of 
alert,  TV  (vertical  +  au)  and  TH  (horizontal  tau) 
are  compared  separately  to  appropriate  thresholds 
instead  of  to  a  single  threshold,  as  before. 


In  qeneral,  the  vertical  and  horizontal  tau 
thresholds  are  calculated  by  subtracting  a 
constant  difference  from  the  emulator  thresholds 
and  limiting  the  results  by  constant  upper  and 
lower  bounds.  For  instance,  the  tau  thresholds 
for  positive  or  negative  advisories  for  an  IFF/IFR 
encounter  in  terminal  airspace  are  calculated  as: 


no 


TIFRV  =  TCONV  -  35 


20J 


TIFPH  =  TCONH 


35 


where  TCOHV  and  TCORH  are  the  vertical  and 
horizontal  tau  thresholds  for  the  emulator  and 
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CALCULATION  OF  THRESHOLDS 


VALUE  OF  B  (GROUP,  2) 
AND  A  MAXIMUM  VALUE 
OF  B  (GROUP, 3).  B  IS 
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indicates  a  lower  hound  of  20  seconds  and  an  upper 
bound  of  30  seconds. 

Figures  D-4-1  and  0-4-2  are  basically  the  sane  as 
the  flowcharts  they  replace,  except  for  the 
following  principal  differences: 

a)  The  thresholds  for  controller  alert 
warnings  and  resolution  advisories  have  been 
replaced  with  separate  vertical  and 
horizontal  thresholds,  named  by  adding  a  V  or 
H  to  the  original  name.  (TCON  becomes  TCONV 
and  TCON?,  for  example.) 

b)  Except  for  VFR/VFF  encounters,  the  alert 
thrjesholds  become  variables,  calculated  from 
the  emulator  threshold  as  previously 
explained.  The  parameters  used  in  these 
calculations  are  stored  in  tables,  and  their 
selection  is  based  uoon  *he  attributes  of  the 
encounter.  (Op  to  60  new  parameters  are 
added  and  aporoximately  13  are  eliminated.) 

c)  An  immediate  horizontal  range  test  is 
added  for  the  generation  of  all  alerts. 

Thus,  if  two  IFF  aircraft  are  flying  parallel 
at  approximately  the  same  altitude,  commands 
will  be  issued  if  the  horizontal  separation 
is  less  than  0.75  nni. 

d)  The  values  of  certain  existing  parameters 
are  changed.  Among  these  are:  NDCONT, 
increased  from  1.0  to  1.44  nni  (squared), 
AFCONI,  decreased  from  1000  feet  to  375  feet, 
and  AFCONV ,  decreased  from  470  feet  to  375 
feet. 

Table  D-4-1  lists  the  new  parameters  required  by 
the  new  detection  logic,  along  with  their  nominal 
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TABLE  D-4-1 


NEW  PARAMETERS  USED  IN  DETECTION  LOGIC 


SYMBOL 

USE 

NOMINAL  VALUE 

1 

ACONTH 

Vertical  range  used  in  calculation  of 

TCONV. 

375  FEET 

RCMD2 

1 

Square  of  horizontal  immediate  range  for 
advisories  to  a  VFR  aircraft. 

0.5625  NMI2 

1 

RCONTH 

Horizontal  range  used  in  calculation  of 
TCONH. 

1.2  NMI 

RCON2 

Square  of  horizontal  immediate  range  for 
controller  alert. 

1.44  NMI2 

RFIFR2 

Square  of  horizontal  immediate  range  for  a 
flashing  PWI  to  IFR  aircraft. 

0.5625  NMI2 

RFPWI2 

Square  of  horizontal  immediate  range  for  a 
flashing  PWI  to  VFR  aircraft. 

0.5625  NMI2 

RIFR2 

Square  of  horizontal  immediate  range  for 
advisories  to  IFR  aircraft. 

0.5625  NMI2 

TCMD 

TFIFR 

TFPWI 

TIFR 

5X3  tables  of  values  used  to  calculate 
thresholds  for  advisories  and  flashing  PWI's. 

(see  last 
page  of 

Figure 

D-4-2). 

TWARN 

Warning  time  used  in  calculation  of  TCONV 
and  TCONH. 

36.8  SEC 

VRCON2 

Square  of  relative  speed  threshold  used  to 
test  for  horizontal  slow  closing. 

1 

3528  KNOT2 

VRZCON 

Relative  speed  threshold  used  to  test  for 
vertical  slow  closing  or  divergence. 

-300  FPM 

■ _ _  _  _  -  - 

values. 


'’’be  Conflict  Alert  emulator  sliding-window  logic 
ic  implemented  in  the  controller  alert  processing 
module  shown  in  Figure  0-4-3.  This  flowchart 
replaces  Figure  5-28  in  Reference  3.  The  new 
logic  reguires  the  addition  of  two  new  items  of 
information  to  each  entry  in  the  controller  alert 
1’st.  These  are: 

1)  the  integer  variable  NCA 

2)  the  bit-string  WIMSTR  (10  bits) . 

Adding  the  variable  MCA  to  the  controller  alert 
list  ensures  controller  alert  processing  for  each 
conflict  at  its  first  appearance,  as  well  as  everv 
NCATH  processing  cycles  thereafter. 

'’’he  bit-string  HIM  STM  represents  the  actual 
sliding  window  for  each  conflct.  Each  tine  a 
particular  conflict  is  processed,  HIMSTR  is 
shifted  one  bit  to  the  right.  If  CAFLG  is  set  for 
the  conflict,  then  the  left-most  bit  of  HIMSTR  is 
cet  t0  *1*.  if  HCTA  of  the  first  HCTA  bits  in 
wtnstp  are  found  to  be  *  1*,  a  controller  alert 
messaae  is  issued.  HCTA  and  MCTA  are  new 
parameters  with  nominal  values  of  3  and  5, 
respectively.  The  maximum  possible  value  of  each 
parameter  is  10,  limited  by  the  length  of  HIMSTR. 

Provision  has  been  made  for  the  emulator  sliding 
window  logic  to  be  bypassed  in  the  event  that 
advisories  are  issued  to  an  IFR  aircraft  in  a 
conflict  pair  before  the  sliding-window  logic  is 
satisfied.  This  provision  and  the  use  of  MCA  for 
each  conflict  ensure  that  commands  will  not  be 
issued  for  IFR  aircraft  before  a  controller  alert 
message  is  generated. 

D-4.  2 _ IFR/VFR  Logic 

The  calculation  of  tau  thresholds  for  IFR/VFP 
encounters  is  basically  *he  same  as  for  IFF/IFR 
encounters,  except  ■♦•hat  a  different  set  of 
constants  is  used.  This  normally  results  in 
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thresholds  that  are  different  for  the  IFR  and  VFR 
aircraft.  Although  the  exact  details  have  not 
been  finalized,  it  is  presently  envisioned  that 
the  IFR/VFF  logic  would  work  in  the  following 
manner: 

The  values  taken  by  the  variable  thresholds  in  the 
A^ARS  logic  depend  upon  the  total  number  of 
aircraft  in  a  conflict  cluster.  A  conflict 
cluster  is  composed  of  all  aircraft  which  are  in 
oairwise  conflict  with  a*  least  one  other  aircraft 
in  *he  cluster.  If  both  aircraft  in  an  IFR/VFR 
Dair  are  ATARS-eguipped  (and  fewer  than  4  aircraft 
are  involved  in  the  conflict  cluster)  ,  +he 
controller  alert  threshold  and  the  threshold  for 
advisories  to  the  I^R  aircraft  would  be  calculated 
in  +he  same  manner  as  for  IFR/IFR  encoun+ers.  The 
threshold  for  VFR  advisories  would  be  calculated 
bv  subtracting  a  constant  (nominally  15  seconds) 
from  the  controller  alert  threshold.  The 
immediate  horizontal  range  for  VFR  advisories 
would  be  set  to  some  fixed  value  to  accomodate 
slow-closing  encounters.  This  value  (nominally  1 
mile)  would  be  intermediate  between  the  immediate 
thresholds  for  TFR  advisories  and  controller  alert 
warnings.  Flashing  Proximity  Warning  Indicators 
(PWI's)  would  be  issued  to  both  aircraft  at  the 
time  of  the  controller  alert. 

Tt  rhe  VFR  aircraft  is  equipped  only  with  a  t!ode-C 
Air  "'raffic  Control  Radar  Beacon  System  (ATCRBS) 
transponder  (and  fewer  than  4  aircraft  are 
involved),  the  controller  alert  and  flashing  PWI 
thresholds  would  remain  unchanged,  but  the  tau 
threshold  for  IFR  advisories  would  be  set  to  a 
constant  value  (nominally  30  seconds)  . 

T*  4  or  more  aircraft  are  involved  in  an  IFR/VFR 
conflict,  +he  thresholds  for  IFF  and  VFR 
advisories  would  be  increased  to  a  constant  value 
(nominally  50  seconds) .  The  controller  alert  and 
flashing  PWT  thresholds  would  be  calculated  as 
before,  but  would  be  given  a  lower  limit  of  this 
same  constant  value. 

In  each  of  the  cases  described  above,  any  ATARS 
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advisories  for  either  aircraft  would  be  selected 
at  the  tine  of  the  controller  alert.  This 
information  would  then  be  provided  to  the 
controller,  in  concert  with  Conflict  Resolution 
advisories,  so  that  any  action  taken  by  the 
controller  would  be  compatible  with  the  advisories 
issued  t0  the  pilots  by  ATARS.  Once  selected,  the 
advisories  for  both  aircraft  would  regain 
unchanqed  for  sone  mininun  period  of  time.  This 
requires  eodification  of  the  ATARS  master 
resolution  logic. 

Figures  D-4-4  through  D-4-7  are  tiee  and  range 
plots  showing  the  various  ATARS  thresholds  for 
IFR/TPR  collision  encounters  at  various  speeds. 
Straight  and  level  flight  at  constant  speed  is 
assumed  for  each  aircraft.  In  each  figure,  the 
slotted  angle  represents  the  angle  of  incidence  of 
♦he  flight  paths  and  not  the  true  bearing  of  one 
aircraft  in  relation  to  the  other.  The  slower 
aircraft  is  assumed  to  be  in  the  center  of  each 
plot,  but  it  is  irrelevant  which  aircraft  is  IFR 
and  which  if  VFR. 

Figure  D-4-4  shows  the  various  thresholds  as  a 
function  of  time,  •’’he  radial  distance  represents 
the  true  time  before  collision.  The  aircraft  are 
assumed  to  be  traveling  at  150  knots  and  200 
knots,  respectively.  Note  that  for  approximately 
a  22-degree  sector  at  the  bottom  of  the  plot 
(corresponding  to  an  overtake  situation) ,  the 
emulator  parameter  VRCON2  (representing  a  relative 
velocity  threshold  of  59.4  knots)  causes  the  logic 
to  switch  discontinuously  to  the  immediate  range 
thresholds. 

figure  D-4-5  shows  the  various  thresholds  as  a 
function  of  range.  The  plot  represents  the  same 
aircraft  speeds  as  Figure  D-4-4,  except  that  the 
separation  distance  is  plotted  on  the  radial  axis 
instead  of  time-to-collision. 

Figures  D-4-6  and  D-4-7  show  true  threshold  tines 
♦or  tWo  other  speed  combinations.  Figure  D-4-fi 
represents  aircraft  speeds  of  150  and  180  knots, 
while  Figure  D-4-7  is  plotted  for  speeds  of  100 
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T/C  -  Tau  threshold  for  Conflict  Alertf  Conflict  Resolution,  and  flashing  PWI's 
T/V  -  Tau  threshold  for  VFR  advisories 
T/I  -  Tau  threshold  for  IFR  advisories 

R/C  -  Horizontal  range  threshold  for  Conflict  Alert,  Conflict  Resolution,  and  flashing  PWI's 
R/V  -  Horizontal  range  threshold  for  VFR  advisories 
R/I  -  Horizontal  range  threshold  for  IFR  advisories 
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FIGURE  D-4-5 

SEPARATION  DISTANCES  FOR  IFR/VFR  THRESHOLDS  WITH 
AIRCRAFT  SPEEDS  OF  150  AND  200  KNOTS 
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LEGEND: 


T/C  -  Tau  threshold  for  Conflict  Alert,  Conflict  Resolution,  and  flashing  PWI's 
T/V  -  Tau  threshold  for  VFR  advisories 
T/I  -  Tau  threshold  for  IFR  advisories 

R/C  -  Horizontal  range  threshold  for  Conflict  Alert,  Conflict  Resolution,  and  flashing  PWI's 
R/V  -  Horizontal  range  threshold  for  VFR  advisories 
R/I  -  Horizontal  range  threshold  for  IFR  advisories 
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FIGURE  D-4-6 

TRUE  TIME*TO*COLLISION  FOR  IFR/VFR  THRESHOLDS  WITH 
AIRCRAFT  SPEEDS  OF  150  AND  180  KNOTS 
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and  200  knots.  lote  that  as  th«  speeds  of  the  two 
aircraft  coae  closer  together,  Isaedlate  range 
thresholds  are  used  over  an  increasingly  wider 
sector,  is  the  difference  in  aircraft  speeds 
increases,  this  sector  narrows,  and  then 
di sappears. 

P-4.3 _ Conflict  Resolution 

An  additional  reguirenent  of  the  ATARS-Conflict 
Alert  interface  development  activity  was  to 
provide  a  Conflict  Resolution  capability  within 
A™ AR R.  •’’his  capability  was  to  provide  a  family  of 
suoqested  resolutions  fpr  display  to  the 
controller  at  the  time  that  a  controller  alert 
warning  was  generated  by  +he  Conflict  Alert 
emulator.  T+  was  found  *hat  Conflict  Resolu+ion 
advisories  could  be  provided  for  the  controller  in 
the  following  way. 

A*  *he  *ime  of  Conflict  Aler+,  the  master 
resolution  nodule  of  ATARS  would  be  called  to 
generate  the  resolution  advisories  that  ATAHS 
would  issue  to  the  pilots  at  that  point.  If 
horisonal  advisories  (positive  or  negative)  were 
*o  result,  a  family  of  possible  resolution 
maneuvers  based  on  these  advisories  would  be 
presented  on  the  controller* s  display.  Figure 
P-4-8  shows  an  example  of  such  a  display  for  a 
head-on  encounter  in  which  ATARS  had  generated 
turn  right  (or  don *t  turn  left)  advisories.  The 
dashed  lines  indicate  a  range  of  possible 
maneuvers  for  each  aircraft,  one  edge  of  the 
familv  could  be  selected  to  be  the  current  tracked 
heading  of  the  aircraft  and  the  other  edge  could 
be  selected  to  be  a  certain  nuaber  of  degrees 
(perhaps  60  degrees)  in  the  direction  of  the 
ATA^S-oer.erated  advisory.  The  straight-ahead 
direction  would  be  permitted,  because  in  any 
specific  case  ♦he  controller  could  choose  to 
maneuver  only  one  of  the  aircraft.  It  would  be 
the  responsibility  of  the  controller  to  select  a 
specific  instruction  for  one  or  both  of  the  pilots 
erom  the  two  families  presented.  When  ATARS 
generates  a  vertical  advisory  (positive  or 
negative)  an  up  or  a  down  arrow  would  be  displayed 
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FIGURE  0-4-0 

CONTROLLER’S  DISPLAY  OF  CONFLICT  RESOLUTION  ADVISORY 


for  each  aircraft.  The  controller  would  select  a 
specific  altitude  for  one  or  both  aircraft. 

If  ATARS  resolution  advisories  for  the  pilots  were 
required  within  a  short  tine  after  Conflict 
Resolution  advisories  had  been  displayed  to  the 
controller,  ATARS  would  siaply  issue  the 
advisories  previouslv  selected  directly  to  the 
aircraft.  This  would  ensure  that  instructions 
issued  by  the  controller  and  by  ATARS  would  not  be 
incompatible.  However,  if  resolution  advisories 
to  *he  aircraft  were  required  later  than  about  six 
scans  after  Conflict  Resolution  advisories  were 
displayed,  the  ATARS  resolution  logic  would  be 
called  again  to  see  if  new  advisories  would  be 
more  appropriate. 
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P-5.  COWCLOSIOIS 


The  results  of  exercising  the  ATARS  resolution 
advisory  logic  and  the  Terminal  Conflict  Alert 
logic  tfi+h  eight  hours  of  recorded  live  traffic 
da ♦a  show  that  it  is  difficult  to  achieve  a  fixed 
real-time  difference  between  alerts  by  adlusting 
♦he  threshold  values  of  the  two  alerting  logics. 

Tn  these  studies,  where  about  *20  seconds  of  real¬ 
time  difference  would  be  expected,  actual  tine 
differences  of  -14,  0,  3,  and  28  seconds  were 
experienced.  It  was  not  possible  to  overcone  all 
factors  which  contribute  to  a  dispersion  of  alert 
time  differences  (e.g.,  turning  encounters). 
However,  the  results  did  indicate  differences  in 
♦he  logics  which  were  responsible  for  sone  of  the 
observed  scatter  and  which  were  anenable  to 
corr ection. 

A  Conflict  Alert  emulator  was  developed  which 
conveniently  incorporated  the  essence  of  the 
linear  prediction  of  *he  Conflict  Alert  logic, 
while  making  minimum  disturbance  to  the  ATARS 
logic.  The  results  obtained  thus  far  with  the 
Conflict  Alert  emulator  indicate  the  feasibility 
of  this  approach  for  producing  results  comparable 
to  those  from  Conflict  Alert  within  ATARS  and  make 
possible  the  shift  of  this  function  from  ARTS  to 
A^ARS.  In  naking  this  shift,  adaptation  of  site- 
specific  data  describing  the  Conflict  Alert  area 
tvpes  would  be  required  for  ATARS.  The  emulator 
algorithm  programmed  for  this  investigation  is 
admittedly  much  simpler  than  the  full  Conflict 
Alert  algorithm  and  night  have  to  be  made  more 
complex  in  order  to  cover  all  of  the  special 
situations  which  Conflict  Alert  is  designed  to 
handle.  Further  tests  and  refinements  of  the 
emulator  should  be  made  using  additional  recorded 
air  traffic  data. 

'’’he  variable  tau  threshold  detection  logic  does, 
of  course,  need  additional  testing  and 
oo+itnization  of  parameters.  To  provide  an 
important  input  in  this  regard,  an  existing 
program  for  Honte  Carlo  simulation  has  been 
modified  to  permit  the  simulation  of  aircraft. 
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ra  soon  as  to  controller  instructions,  so  that 
study  can  bs  sads  of  tbs  degree  to  vhlch 
instructions  issnsd  by  tbs  controller  sight 
prevent  the  issuance  of  ITftVS  advisories. 
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APPENDIX  E 

ABILITY  OF  ATARS  TO  PROTECT  AGAINST  ALTITUDE 
CLEARANCE  VIOLATIONS 

A .  D .  Mundra 
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g-1. _ IWTPODOCTIOM 

The  statistics  in  Volume  II  relating  to  the 
aircraft  separation  assurance  problen  indicate 
that  altitude  deviations  are  a  significant 
contributor  to  the  mid-air  collision  threat.  An 
altitude  deviation  occurs  when  a  pilot 
significantly  overshoots  or  undershoots  his  level- 
off  to  an  assigned  altitude  or  departs 
significantly  from  level  flight  at  an  assigned 
altitude.  Altitude  deviations  often  occur  due  to 
high  workload,  distraction,  inattention,  or 
misunderstood  clearances.  A  na+ural  role  for  an 
automatic  separation  assurance  system  would  be  to 
issue  resolution  advisories  when  an  altitude 
deviation  leads  to  the  threat  of  a  mid-air 
collision. 

However,  the  separation  assurance  system  cannot  be 
designed  +o  protect  against  altitude  deviations 
without  taking  into  account  the  operating 
practices  used  within  the  National  Airspace  System 
today.  In  normal  operations,  air  traffic 
controllers  may  issue  clearances  to  Instrument 
Flight  Pules  (IFP)  aircraft  that  provide  1000  feet 
separation  between  aircraft.  (2000  fee* 
separation  must  be  provided  above  Flight  Level 
290.)  If  a  descending  aircraft  makes  a  normal 
level-off  at  a  cleared  altitude  1000  feet  above 
another  aircraft  (with  the  two  aircraft  in  close 
horizontal  proxinity) ,  the  separation  assurance 
system  should  not  reguire  resolution  maneuvers. 

On  the  o«-her  hand,  if  a  pilot  or  controller  error 
should  occur  which  results  in  a  true  conflict 
between  two  aircraft,  the  separation  assurance 
system  must  be  able  to  issue  resolution  advisories 
in  sufficient  time  to  avert  a  collision. 

Controllers  are  permitted  to  separate  an  aircraft 
operating  under  Visual  Flight  Pules  (VFF)  from 
another  VFP  aircraft  or  from  an  IFP  aircraft  by 
500  feet  in  altitude.  The  rules  for  establishing 
cruising  altitudes  below  18,000  feet  also  nake  it 
possible  for  IFP  and  VFP  aircraft  +o  be  separated 
by  500  feet.  (VFP  aircraft  flying  in  an  easterly 
direction  fly  at  odd  thousands  of  feet  plus  500 
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feet  and  in  a  westerly  direction  at  even  thousands 
of  feet  plus  500  feet.  IFR  aircraft  fly  at  odd 
thousands  of  feet  when  flying  toward  the  east  and 
at  even  thousands  of  feet  toward  the  west.) 
Therefore,  when  a  VFF  aircraft  is  involved,  the 
separation  assurance  systew  wust  permit  a 
descending  aircraft  to  level-off  500  feet  above 
another  aircraft,  yet  it  wust  be  able  to  protect 
against  an  altitude  deviation. 

Clearly,  the  goals  of  avoiding  unnecessary 
intrusion  in  normal  situations  and  of  providing 
adeauate  separation  when  an  altitude  deviation 
occurs  are  competing  goals.  A  compromise  in  the 
two  types  of  performance  will  have  to  be  accepted. 

The  presence  of  altimetry  errors  makes  the  task  of 
discriminating  between  normal  level-offs  and 
altitude  deviations  more  difficult.  With  some 
combinations  of  altimetry  errors,  the  separation 
assurance  system  will  think  the  aircraft  closer 
than  they  really  are  and  will  issue  unnecessary 
advisories.  With  other  combinations  of  errors, 
the  aircraft  will  be  closer  than  indicated  and  the 
separation  assurance  system  will  be  late  in  giving 
advisories  or  may  fail  to  give  advisories  at  all. 

This  appendix  contains  analysis  and  simulation 
results  that  indicate  the  degree  to  which  an 
automatic  separation  assurance  system  can  protect 
against  altitude  deviations  while  avoiding 
unnecessary  alerts.  The  separation  assurance 
system  considered  here  is  the  Automated  Traffic 
Advisory  and  Resolution  Service  (ATARS)  formerly 
known  as  Intermittent  Positive  Control  (IPC)  . 
Although  the  analysis  has  been  carried  out  for 
ATARS,  many  of  the  results  also  apply  to  other 
separation  assurance  svstems,  namely  Conflict 
Alert  and  the  Beacon  Collision  Avoidance  System 
(BCAS) .  Specific  recommendations  for  changes  to 
ATAPS  parameters  are  made  based  upon  the  results 
of  this  study. 

This  study  began  by  evaluating  the  performance  of 
the  current  ATARS  algorithm  when  operating  with  a 
radar  scan  period  of  4.7  seconds.  The  version 
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that  was  studied  is  presented  in  Reference  1.  Two 
indices  of  performance  were  used.  They  are:  1) 
♦he  ability  of  ATARS  to  provide  protection  when  an 
aircraft  with  a  vertical  rate  fails  to  level  off, 
and  2)  the  unnecessary  alerts  generated  when 
pilots  are  following  their  clearances.  Two  types 
of  encounters  were  simulated  via  Honte  Carlo 
simulation  to  obtain  these  indices.  They  were  the 
broken  clearance  encounters  and  the  normal  level- 
off  encounters.  Frequency  of  surveillance  and 
communication,  reliability  of  surveillance  and 
communication,  altimetry  errors,  vertical  tracker 
performance,  and  the  type  of  collision  avoidance 
logic  are  factors  that  have  an  impact  on  these 
performance  indices.  These  factors  were  taken 
into  account  in  this  study. 

The  results  with  the  current  ATARS  showed  that 
ample  protection  against  altitude  deviations  could 
be  provided,  but  very  high  rates  of  unnecessary 
alarms  would  be  experienced.  The  vertical  portion 
of  the  ATARS  collision  avoidance  algorithm  was 
*hen  analyzed.  This  analysis  suggested  some 
changes  to  the  logic  which  determines  whether  the 
resolution  advisories,  when  required,  should  be 
positive  or  negative  advisories.  Changes  were 
developed  and  tested  and  an  improved  balance 
between  the  two  performance  measures  was  noted. 

•♦he  Federal  Aviation  Administration  (FAA)  has  been 
considering  how  to  deploy  the  Discrete  Address 
Beacon  System  (DABS)  and  ATARS  to  provide  service 
in  en  route  airspace.  If  DABS  and  ATARS  were  to 
be  incorporated  into  the  existing  Air  Rou*e 
Surveillance  Radars  (ARSR’s)  they  would  be  forced 
to  operate  with  radar  scan  periods  of  10  to  12 
seconds  instead  of  the  4  to  5  seconds  used  by 
terminal  radars.  A  previous  study  (Reference  2) 
showed  that,  satisfactory  ATARS  service  could  not 
be  provided  for  VFR  operations  unless  the  scan 
period  were  shorter  ♦han  S  or  6  seconds.  However, 
it  has  been  proposed  that  ATARS  might  serve  a  more 
limited  role  in  high  altitude  en  route  airspace 
where  separations  are  larqer  and  dependence  upon 
visual  sighting  of  aircraft  is  not  a  factor. 

Thus,  it  is  relevant  to  also  evaluate  the  ability 
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of  ATARS  to  protect  against  altitude  deviations 
when  using  a  radar  scan  period  of  10  seconds.  A 
trial-and-error  procedure  for  adjusting  the  ATAHS 
parameters  was  used  to  obtain  acceptable 
protection  against  altitude  deviations.  The 
unnecessary  alara  rate  was  then  observed.  A 
significant  increase  in  the  detection  time 
threshold  was  required  to  provide  acceptable 
protection. 

Only  the  vertical  portions  of  the  ATAFS  detection 
and  resolution  logic  were  considered  in  this 
study.  All  resolutions  were  with  vertical 
maneuvers.  Throughout  this  appendix,  it  is  to  be 
understood  that  the  two  subject  aircraft  are  at 
all  times  in  conflict  in  the  horizontal  plane. 


fr2».PB££Q£HB5CI.oy  CQBBPBT  mgs 


The  first  s*ep  in  studying  the  ability  of  ATARS  to 
protec*  against  altitude  deviations  was  to  assess 
the  performance  of  the  current  ATARS  through  use 
of  a  Honte  Carlo  sinulation.  The  ATARS  vertical 
detection  and  resolution  logic  is  reviewed  by  way 
of  introduction. 

E-2. 1 _ A^ARS  Vertical  Detection  and  Resolution 

Logic 

ATARS  perforns  vertical  detection  using  *he 
altitudes  and  altitude  ra*es  that  result  fron 
tracking  the  reported  altitudes  delivered  by  the 
DABS  sensor  each  scan.  Let  ZT1  and  7*"2  be  the 
tracked  altitude  and  ZDT1  and  ZDT2  be  the  tracked 
altitude  rates  of  two  aircraft  under 
consideration.  ATARS  computes  the  vertical 
separation,  RZ,  and  the  ver*ical  closing  speed, 
VRZ,  by 


R7  =  7T2 


ZT1 


VPZ  =  ZDT2  -  ZDT1 . 

Vertical  tau,  TV,  which  is  the  +  ine  required  for 
the  aircraft  to  reach  the  same  altitude  if  they 
maintain  their  current  vertical  rates,  is  used  as 
the  time  criterion  for  resolution  advisories.  It 
is 


TY  =  — RZ/VRZ. 

The  conditions  for  a  resolution  advisory  are  net 
if 


ABS(RZ)  <  AF  or 
TV  <  TCHD. 

AF  is  the  current  vertical  separation  threshold 
and  has  a  nominal  value  of  1000  feet.  TCHD  is  a 
*ime  threshold  used  as  a  criterion  for  vertical 
tau.  TCHD  takes  one  of  a  set  of  values,  depending 
upon  the  attributes  (equipage,  flight  rules,  and 
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speeds  of  the  aircraft,  etc.)  of  the  encounter. 

For  the  current  study,  the  value  appropriate  for 
two  VFB  aircraft,  both  equipped  with  ATABS,  was 
used.  This  value  is  referred  to  as  TL2  (noainal 
value  of  32  seconds)  in  Deference  1. 

Normally,  the  conditions  for  a  resolution  advisory 
must  be  met  on  two  out  of  three  successive  scans 
before  resolution  advisories  are  actually  issued 
to  the  pilots.  However,  advisories  are  issued 
immediately  if: 

ABS(BZ)  <  TAF  or 

TV  <  TCHD  -  TTH. 

’’'AF  is  a  separate  threshold  for  current  vertical 
separation  which  permits  the  two-out-of-three 
requirement  to  be  bypassed.  In  the  current  ATABS 
it  has  a  nominal  value  of  1000  feet.  TTH  is  a 
parameter  for  use  with  vertical  tau  which  permits 
the  two-out-of-three  requirement  to  be  bypassed. 

It  has  a  nominal  value  of  seven  seconds,  ^his 
bypass  is  provided  so  that  if  an  unusually  low 
value  of  current  vertical  separation  o^  vertical 
tau  is  observed  when  the  conflict  conditions  are 
firs*  me*  (as  might  happen  when  one  aircraft  has 
lust  entered  ATABS  coverage  or  when  a  ver*ical 
maneuver  is  suddenly  initiated),  advisories  can  be 
issued  immediately. 

Once  it  has  been  determined  that  resolution 
advisories  are  required,  ATABS  exercises 
additional  logic  +o  determine  whether  those 
advisories  should  be  positive  advisories 
(CIIHP/DESCFND)  or  negative  advisories  (DON'T 
CLIHB/OON'T  DESCEND).  This  logic  computes  a 
variable  called  the  vertical  miss  distance,  VHD. 
VHD  is  a  number,  greater  than  or  equal  to  zero, 
indicating  the  minimum  vertical  separation  that 
the  two  aircraft  will  have  during  the  next  TVPCHD 
seconds  if  they  maintain  constant  vertical  rates. 
TVPCHD  has  a  nominal  value  of  30  seconds.  If  VHD 
is  less  than  the  parameter  ASEPL  (nominal  value  of 
470  feet) ,  then  positive  advisories  are  required. 
Negative  advisories  are  required  otherwise. 
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An  existing  Honte  Carlo  simulation  was  used  to 
conduct  computer  simulations  of  the  basic 
scenarios  shown  in  Figures  E-2-1  and  E-2-2.  In 
Figure  E-2-1,  Aircraft  2  is  flying  level  and 
Aircraft  1  is  descending  towards  it.  (To  the 
current  ATAFS  algorithms,  a  climbing  scenario 
would  look  the  same,  so  only  descending  scenarios 
have  been  investigated.)  The  aircraft  maintain 
horizontal  coincidence  at  all  times.  At  some 
point  in  its  descent,  the  clearance  is  violated  by 
Aircraft  1.  At  some  other  point,  ATARS  issues 
advisories  and  both  aircraft  respond  to  to  the 
advisories.  In  Figure  E-2-2,  Aircraft  2  is  flying 
level  at  altitude  Z2.  Aircraft  1  is  descending  at 
vertical  rate  ZD  and  levels  off  at  altitude  71. 
Ideally,  whenever  Aircraft  1  follows  its  clearance 
and  levels  off  at  its  assigned  altitude,  ATARS 
should  not  issue  any  positive  advisories.  If 
positive  advisories  are  generated,  they  represent 
unnecessary  alerts. 

The  simulation  generates  encounters  from 
deterministic  input  conditions,  and  then  advances 
the  positions  of  the  two  aircraft  one  scan  at  a 
time,  performing  conflict  detection  at  each  scan. 
Measurement  errors  can  be  simulated  at  each  cycle. 
The  only  errors  simulated  for  these  runs  were 
altimetry  errors  as  described  below.  In  addition, 
a  scan-to-scan  jitter  of  10  feet  (one  sigma)  was 
introduced  to  simulate  pilot  variation  from 
assigned  altitude.  When  the  criteria  for  issuing 
ATAFS  advisories  were  satisfied  the  advisories 
were  selected,  and  the  responses  of  the  aircraft 
to  these  advisories  were  simulated,  taking  into 
account  random  pilot  response  tinGS  and  pilotage 
variations.  The  true  separation  between  aircraft 
was  computed  at  every  scan  and  the  minimum  for  the 
encounter  was  determined  and  stored  for  printout 
on  a  "scatter  plot". 

"'he  simulation  has  accounted  for  the  following 
factors,  which  can  be  expected  to  have  a 
significant  influence  on  the  performance  indices 
discussed  in  the  preceding  section. 


AIRCRAFT  1 


FIGURE  E-2-1 

SCENARIO  WHEN  ALTITUDE  CLEARANCE  IS  NOT  FOLLOWED 


AIRCRAFT  1 


FIGURE  E-2-2 

SCENARIO  WHEN  ALTITUDE  CLEARANCE  IS  FOLLOWED 


1.  Scan  Period:  The  DABS  sensor  determines 
the  aircraft  position  once  per  antenna 
revolution.  In  this  simulation  a  scan  period 
of  4.7  seconds  vas  used.  This  creates  an 
uncertainty  in  ATABS*  knowledge  about  the 
position  of  the  aircraft  between  scans. 

Thus ,  the  antenna  nay  scan  the  aircraft  at 
any  tine  within  the  span  of  several  seconds 
as  it  levels  off.  In  this  appendix,  the  tine 
between  the  instant  that  a  level-off  begins 
and  when  the  antenna  next  scans  past  the 
aircraft  is  called  the  scanning  delay,  ’’’his 
delay  becones  nore  critical  in  surveillance 
systems  which  have  a  longer  scan  period. 

2.  Peliability:  Hadar  data  acquisition  and 
data  link  conaunicati on  are  reliable  to  some 
value  less  than  100*.  Tn  this  study,  a  value 
of  96*  has  been  used. 

3.  Altimetry  Errors:  when  a  pilot  is  issued 
an  altitude  clearance,  ♦he  pilot  flies  to  and 
maintains  the  assigned  altitude  by  reference 
♦o  his  altimeter.  The  altitude  displayed  on 
his  altimeter  is  called  the  indicated 
altitude.  Indicated  altitude  has  a  certain 
error  called  error  in  indicated  altitude.  If 
the  error  in  indicated  altitude  is  zero,  then 
the  indicated  altitude  is  the  true  pressure 
altitude.  The  altitude  reported  to  the 
ground  is  different  from  bo*h  the  true 
pressure  altitude  and  the  indicated  altitude. 
This  is  depicted  in  Figure  F-2-3.  Aircraft  A 
and  B  are  assigned  altitudes  7A  and  ZB.  The 
altitudes  shown  by  their  altineters  are 
therefore  ZA  and  ZB.  Their  altimeters  are  in 
error  by  ea  and  eb,  respectively.  Therefore, 
they  are  at  true  pressure  altitudes  TA  and  TB 
where: 

TA  =  ZA  -  ea 

I'B  =  ZB  -  eb. 

Suppose  HA  and  HB  are  the  Hode-C  altitudes 
reported  by  the  transponders  (HA  and  HB  are 
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FIGURE  E-2-3 

DEPICTION  OF  THE  VARIOUS  ALTIMETRY  ERRORS 


quantized  to  the  nearest  hundred  feet). 

Then: 

HA  =  TA  ♦  ra  ♦  qa 
HB  =  TB  ♦  rb  ♦  qb 

where  ra,  rb  are  the  errors  in  the  encoding 
equipment  before  quantization  and  qa  and  qb 
are  quantization  errors  (always  <  50  feet), 
(ra  ♦  qa)  is  the  (total)  error  in  reported 
altitude  for  aircraft  A. 

i 

Altitudes  HA  and  HB  are  used  as  raw  altitude 
data,  which  are  smoothed  by  the  ATABS 
tracker,  and  eventually  used  by  •'•he  ATABS 
algorithms.  Thus,  while  the  Air  Traffic 
Control  (ATC)  system  has  issued  clearances 
for  a  separation  =  (ZA  -  ZB)  (such  as  500  or 
1000  feet) ,  the  separation  presented  to  ATABS 
is  (HA  -  HB). 

(HA  -  HB)  =  (ZA  -  ?B)  ♦  (ra  ♦  qa  -  ea) 

-  (rb  ♦  qb  -  eb)  . 

•’’he  following  error  values  taken  from 
Beference  3,  which  reported  the  results  of 
in-flight  measurements  of  general  aviation 
altimetry  errors,  have  been  used  in  this 
study: 

ea,  eb  =  60  feet 
ra,  rb  =  100  teet. 

These  represent  one  standard  deviation  values 
for  a  sample  of  general  aviation  aircraft. 
Values  of  about  half  these  can  be  expec+ed 
for  air  carrier  aircraft.  (See  Beference  3.) 

4.  Tracking  errors:  Any  tracker  will  have 
residual  errors  in  altitude  and  altitude 
ra+e,  even  when  an  aircraft  is  maintaining  a 
constant  vertical  rate.  In  addition,  the 
tracker  will  have  certain  delays  and 


consequent  errors,  in  tracking  vertical 
maneuvers.  The  ATAFS  vertical  tracker  is 
used  in  all  simulations  made  for  this  study. 
It  is  a  simple  linear  (alpha-beta)  tracker 
with  constant  parameters.  This  tracker 
corrects  the  tracked  altitude  and  altitude 
rate  at  each  scan  with  a  correction 
proportional  to  the  difference  between  the 
current  reported  altitude  and  the  altitude 
predicted  for  the  current  scan  on  the  basis 
of  the  previous  scan's  altitude  and  altitude 
rate. 

y-2.  3 _ Protection  Afforded  by  Current  ATAFS  When 

Vertical  Clearance  is  Violated 

Results  indicating  the  ability  of  ATAFS  to  provide 
adequate  protection  against  vertical  conflicts  are 
presented  in  this  section,  the  following 
variations  were  made  on  the  basic  geometry  of 
Figure  P-2-1  to  create  an  appropriate  sample  of 
conflicts: 

1.  Descent  Fates:  seven  values  were  used, 

(all  values  are  in  feet  per  minute) :  500, 

1000,  1500,  2000,  2500,  3000,  4000. 

2.  Scanning  Delay:  Pour  random  samples  were 
drawn  from  a  uniform  distribution  to  reflect 
scanning  delay  within  the  4.7  second  scan. 

3.  Altimetry  Errors:  only  the  error  in  the 
reported  altitude  is  relevant  for  the 
clearance  broken  scenario.  Thirteen 
repetitions  of  the  encounter  were  made  for 
every  combination  of  descent  rate  and 
scanning  delay.  Different  errors  in  reported 
altitude,  picked  from  a  normal  distribution 
with  zero  mean  and  standard  deviation  of  100 
feet  (before  quantization) ,  were  used  for 
each  repetition. 

Only  vertical  advisories  were  issued,  •’’he  escape 
acceleration  in  response  to  advisories  was  assumed 
to  be  1/4g  (i.e.,  eight  feet  per  second  per 
second) .  Pilot  response  time  was  assumed  to  be  an 


average  of  four  seconds  with  a  spread  of  three 
seconds.  (I.e. ,  the  response  tine  is  between  2.5 
and  5.5  seconds.) 


Figure  E-2-4  shows  the  scatter  plot  that  results 
from  the  clearance  broken  scenario.  The  scatter 
plot  shows  one  point  for  each  repetition  of  the 
scenario.  The  point  indicates  the  horizontal  and 
vertical  conponents  of  separation  when  the 
aircraft  were  at  their  smallest  separation.  The 
point  represents  the  true  separation  at  closest 
approach.  The  smallest  separation  that  would  be 
observed  by  ATARS  night  be  greater  or  less  than 
•‘■hi;;  depending  on  the  errors  in  reported  altitude. 
Tn  +he  plots  shown,  horizontal  jitter  is  added 
purely  as  an  aid  to  show  separation  of  individual 
points,  letter  codes  that  correspond  to  specific 
vertical  rates  are  as  described  in  the  legend. 

If  a  scatter  plot  were  made  when  no  ATAFS 
resolution  is  provided,  all  the  points  would  lie 
on  ♦he  horizontal  axis,  since  all  cases  simulated 
represent  collision  situations.  Figure  F-2-4 
shows  the  result  of  ATARS  intervention.  It  shows 
that  the  resolution,  is  effective  for  all  descent 
rates.  A  initial  separation  of  at  least  200  feet 
is  always  guaran+eed.  In  fact,  the  separation 
achieved  by  following  ATAFS  commands  is  usually 
400  feet  or  nor©. 

E-2.4  Unnecessary  Alert  Performance  of  Current 
ATAFS 

Having  demonstrated  that  the  current  ATAFS 
provides  sufficient  protection  against  conflicts 
in  the  vertical  dimension,  the  study  next  examined 
how  often  unnecessary  alerts  were  generated  when 
aircraft  followed  their  clearances. 

"’he  basic  scenario  of  Figure  f-2-2  was  used  for 
*his  purpose.  The  following  variations  were 
applied: 

1.  Final  Separation  after  Level-Off.  Two 
values  were  considered:  500  feet  and  1000 
feet. 
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VERTICAL  SEPARATION  AT  CLOSEST  APPROACH  -  FEET 
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FIGURE  £-2-4 

PROTECTION  PROVIDED  IN  VERTICAL  CONFLICTS  BY 
CURRENT  ATARS 
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2.  Descent  Rates  (all  values  in  PPM) .  Seven 
descent  rates  were  used:  500,  1000,  1500, 
2000,  2500,  3000,  4000. 

3.  level-Off  Acceleration.  Pour  values  were 

used:  1/8g,  1/4g,  3/8g  and  1/2g. 

4.  Scanning  Delay.  Four  random  samples  mere 
drawn  from  a  uniform  distribution  to  reflect 
scanning  delay  within  the  4.7  second  scan. 

5.  Altimetry  Frrors.  The  altimetrv  error 
model  described  earlier  was  used.  Doth  the 
error  in  indicated  altitude  and  the  error  in 
reported  altitude  are  relevant.  Four 
repetitions,  each  with  different  altimetry 
errors,  were  ctea*ed  for  every  combination  of 
parameter  variations  listed  in  items  1  *o  4 
above. 

''"able  F-2-1  presents  results  of  +  he  simulations 
showing  *he  numbers  of  unnecessary  alerts 
generated  by  the  current  ATAPS  when  vertical 
clearances  are  followed.  This  table  indicates  the 
percentages  of  encounters  in  which  positive  or 
negative  advisories  were  issued  for  each 
combination  of  descent  rate  and  final  separation, 
^ach  combination  ot  descent  rate  and  final 
separation  reoresents  64  repetitions  of  the  basic 
scenario.  '’’he  Positive  Advisories  cell  represents 
the  percentage  of  the  64  repetitions  in  which  a 
rositiye  advisorv  was  issued  at  some  time  during 
the  encounter.  ’’’he  Negative  Advisories  Only  cell 
represents  that  percentage  of  the  64  repetitions 
in  which  only  negative  advisories  were  issued 
during  the  encounter.  If  at  one  point  during  the 
encounter  negative  advisories  were  present,  but 
subsequent  positive  advisories  were  issued,  that 
repetition  was  counted  in  the  Positive  Advisories 
cell. 

'’’he  simulation  indicated  that  either  a  negative  or 
a  positive  advisory  would  be  issued  in  every 
instance  to  a  pilot  climbing  or  descending  to  an 
altitude  500  feet  from  another  aircraft.  For 
descent  rates  of  1000  FPH  or  greater,  all 
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advisories  are  positive.  Where  a  final  separation 
of  1000  feet  is  used,  soae  positive  advisories  are 
issued  at  all  descent  rates  equal  to  or  greater 
than  1000  PPM.  At  a  descent  rate  of  500  PPM, 
negative  advisories  are  issued  about  a  quarter  of 
♦he  tiae. 

These  rates  of  advisories  are  much  higher  than 
desired,  '’’he  positive  advisories  are  particularly 
troublesome,  because  they  require  responses  from 
both  aircraf*.  With  negative  advisories,  the 
level  aircraft  is  not  required  to  initiate  any 
action.  In  these  geometries,  issuing  positive 
advisories  implies  a  level  of  threat  to  the  pilot 
tha*  is  not,  in  fact,  present.  A  discussion  of 
the  causes  for  these  high  rates  is  presented  in 
♦he  next  section. 

F-2. 5 _ Explanation  for  High  Pates  of  Advisories 

Such  a  high  frequency  of  advisories  is  due  to: 

1.  IOGTC:  The  use  of  the  particular 
magnitude  of  the  immediate  vertical  searation 
parameter,  AF,  and  the  use  of  the  vertical 
miss  distance  variable,  VMD. 

2.  GEOMETBY:  The  inherent  sensitivity  of 
this  geometry  to  high  descent  rates. 

These  are  considered  in  turn. 

Since  AP  is  1000  feet  in  the  current  logic,  ATABS 
always  issues  at  least  a  negative  command  whenever 
the  reported  vertical  separation  is  less  than  1000 
feet.  Thus,  when  &n  aircraft  intends  to  level  off 
500  feet  above  or  below  another  aircraft,  a 
negative  advisory  is  issued  when  the  aircraft 
comes  wi*hin  1000  feet  (reported)  of  the  other 
aircraft.  It  receives  a  level-off  command  about 
500  feet  before  its  cleared  altitude.  This  effect 
is  also  present,  although  to  a  lesser  degree,  for 
final  separations  of  1000  feet.  When  aircraft  are 
flying  at  1000  feet  final  separation,  altimetry 
errors  alone  can  cause  reported  separations  of 
less  than  1000  feet  with  a  probability  of  somewhat 
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less  *han  50Y.  Thus,  doe  to  the  effect  of  the  \T 
parameter,  negative  advisories  will  be  issued  to 
marv  aircraft  lust  before  they  reach  their  cleared 
altitudes  and  will  stay  on  after  the  aircraft 
levels  off.  The  negative  advisories  issued  in 
tnanv  of  ♦hese  circumstances  have  not  prevented 
pilo+s  from  reaching  their  cleared  altitudes  and 
♦he  interference  in  these  cases  may  be  considered 
minimal.  However,  in  the  case  of  low  descent 
rates  and  a  final  separation  of  500  feet,  negative 
advisories  would  cause  aircraft  to  level  off 
several  hundred  feet  before  reaching  their  cleared 
alti+ude  and  ♦his  could  be  considered  a  small 
nuisance. 

Positive  advisories  represent  a  greater  problem 
than  negative  advisories,  if  they  are  issued  when 
the  pilo+  actually  intends  to  level  off  at  his 
cleared  altitude.  Negative  advisories  can  provide 
a  natural  reinforcement  to  the  pilot  as  he  levels 
o^f.  However,  positive  advisories  imply  an 
immed:a+e  *hreat  and  an  abnormal  situation.  Yet, 
wi-*-h  *his  scenario,  ♦hey  are  issued  in  normal  and 
rou+ine  situations. 

"'he  cause  of  the  large  number  of  positive 
advisories  is  the  30  second  projection  in  the  VHD 
calculation.  To  illustrate,  consider  an  aircraft 
descending  at  1000  FPH  to  an  altitude  500  feet 
above  another  aircraft.  When  the  descending 
aircraft  is  within  1000  feet  of  the  other  aircraft 
♦he  conditions  for  an  advisory  are  met.  Suppose 
the  aircraft  is  900  feet  from  the  other  aircraft 
when  the  conditions  are  met  for  +he  second  time  to 
satisfv  the  two-out-of-three  logic.  The  vertical 
miss  distance,  which  is  the  vertical  separation 
that  the  aircraft  will  have  30  seconds  in  the 
future,  is  computed.  It  has  a  value  of  400  feet. 
The  value  of  the  vertical  miss  distance  is 
compared  to  the  ASTZPL  parameter  which  has  a  value 
of  470  feet.  Since  the  vertical  miss  distance  is 
less,  positive  advisories  are  required.  Clearly, 
all  higher  descent  rates  will  also  result  in 
positive  advisories  when  the  intended  final 
separation  is  500  feet. 
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Some  positive  advisories  are  also  issued  when  the 
descent  rate  is  1000  FPH  and  the  final  separation 
is  1000  feet.  These  advisories  result  from  a 
combination  of  altimetry  errors  and  from  the 
overshoot  in  tracked  altitude  introduced  by  the 
vertical  tracker  when  a  level-off  occurs.  If 
there  were  no  altimetry  errors  and  tracking  were 
perfect,  there  would  be  no  positive  advisories  in 
this  case. 

The  current  ATABS  logic  is  responsible  fc-r  many  of 
the  unnecessary  advisories  at  lower  vertical 
rates.  However,  at  higher  vertical  ra*es  it 
becomes  impossible  with  any  logic  to  provide 
protection  when  an  aircraft  fails  to  level  off, 
because  the  level-off  is  started  when  there  is 
less  than  30  seconds  to  collision. 

Consider  the  idealized  approach  geometry  in  Figure 
E-2-5.  This  is  similar  to  Figure  F-2-2,  except 
that  the  level-off  is  assumed  to  be  instantaneous. 
Aircraft  2  is  flying  straight  and  level.  Aircraft 
1  is  descending  at  a  vertical  rate  ZD  and  levels 
off  instantaneously  at  t  =  o.  The  vertical 
separation  between  the  two  aircraft  after  Aircraft 
1  levels  off  is  FS.  There  exists  horizontal 
coincidence  at  all  times. 

let  TV  denote  the  vertical  tau  value  for  the  two 
aircraft,  tv  =  -(vertical  separation/vertical 
closing  rate).  Let  TVHTN  denote  the  minimum 
vertical  tau  reached  during  the  entire  encounter. 
Then  TVHIN  =  FS/7D  and  will  be  reached  just  prior 
to  the  instantaneous  level  off  at  T  =  o. 

Table  F-2-2  shows  the  TVHTN  values  reached  for  the 
♦wo  final  separations  for  different  descent  rates. 
At  a  final  separation  of  500  feet,  any  descent 
rate  greater  than  or  equal  to  1000  FPH  always 
yields  TVHIN  values  of  30  seconds  or  less. 
Similarly  for  a  final  separation  of  1000  feet, 
descent  rates  of  2000  FPH  or  more  always  yield  tau 
values  of  30  seconds  or  less.  Experience  has 
shown  that  30  seconds  is  about  the  smallest 
warning  time  that  can  be  used  by  ATANS.  In 
general,  higher  vertical  rates  necessarily  cause 
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FIGURE  E-2-5 

IDEALIZED  LEVEL-OFF  SCENARIO 


low  tau  values  to  be  reached  during  the  encounter 


E-2.6  Deriving  Optimum  Parameter  Values 

Using  vertical  tau  as  an  alert  criterion  neans 
that  alerts  are  given  with  a  constant  time  to 
collision,  regardless  of  descent  rates.  The 
vertical  separation  at  the  beginning  of  the  escape 
(or  level-off)  maneuver  is  a  linear  function  of 
descent  ra*e.  However,  the  vertical  distance 
traversed  during  a  constant  acceleration  escape 
(or  level-off)  is  a  quadratic  function  of  vertical 
rate.  Thus,  the  tau  criterion  does  not  produce 
the  same  minimum  separation  for  all  descent  rates. 
Fesults  are  now  presented  to  show  what  value  of 
the  immediate  altitude  parameter,  AF,  or  what 
value  of  the  warning  time  parameter,  TCHD,  would 
be  required  as  a  function  of  descent  ra*e,  to 
provide  a  desired  minimum  separation. 

Consider  a  scenario  in  which  Aircraft  2  is  flying 
level  and  Aircraft  1  is  descending.  Assume  there 
exists  horizontal  coincidence.  The  values  of  the 
AF  and  tCHD  parameter  are  to  be  found  that  will 
produce  a  certain  desired  minimum  separation,  DS, 
if  a  negative  advisory  is  issued  to  the  descending 
aircraft.  The  values  computed  for  AF  will  be  the 
values  that  would  produce  the  desired  result  if  AF 
alone  were  *he  alert  criterion.  The  same  is  true 
for  TCHD. 

Figure  E-2-6  shows  the  various  vertical  distances 
that  ma*e  up  the  total  protection  volume  when  an 
aircraft  levels  off  in  response  to  an  advisory. 
Assume  that  the  resolution  consists  of  a  "don't 
descend"  command  to  the  descending  aircraft.  The 
actual  vertical  distance  CD  at  which  a  level-off 
command  must  be  issued  such  ♦hat  the  final 
separation  achieved  would  be  DS  is  given  by 

CD  =  DS  ♦  Total  distance  traversed  before 
level-off 

=  DS  ♦  DIO  ♦  ZD  ♦  (FESPS  ♦  1.5  *  SCANT) 
where  DIO  =  the  deceleration  distance 
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ZD  =  vertical  rate  of  Aircraft  1 

FFSPS  =  Pilot  and  aircraft  response  time 

SCANT  =  radar  scan  +-iae.  (The  communication 
delay  is  between  SCANT  and  2*SCANT. 

We  use  the  average,  1.5*SCANT.) 

Figure  E-2-6  does  not  show  the  effects  of 
altimetry  errors.  The  error  in  reported  altitude 
is  100  feet  (one  sigma  before  quantization)  for  a 
single  aircraft.  Quantization  error  alone  has  a 
one  sigma  value  of  29  feet.  Therefore  the  error 
in  reported  altitude  after  quantization  will  be 
110  feet  (one  sigma).  Tj,e  error  in  reported 
separation  is  the  root  mean  square  value  of  this 
error  for  two  aircraft  and  is  therefore  154  feet 
(one  sigma) .  To  obtain  98%  reliability  we  would 
need  to  protect  against  errors  as  large  as  two 
standard  deviations  in  magnitude  or  about  310 
feet.  The  collision  avoidance  system  then  needs 
an  immediate  altitude  threshold  AF  of  (CD  ♦  310) 
feet  or  a  TCHD  value  of  AF/ZD.  These  calculations 
have  been  made  assuming  that  the  alert  criteria 
need  be  satisfied  only  once  to  issue  an  advisory. 
If  the  two-out-of- three  requirement  is  added,  then 
AF  should  be  increased  by  ?D  *  SCANT. 

Table  E-2-3  shows  the  protection  parameters  AF  and 
TCHD  necessary  for  different  descent  ra*es.  The 
following  variable  values  have  been  used: 

DS  =  100  feet 

f  =  1/4  *  g  =  8  f eet. /sec/sec 
FESPS  =  4  seconds 
SCANT  =4.7  seconds 

Commands  issued  if  alert  criterion  met  just  once. 

Table  E-2-3  permits  an  estimation  of  the 
projection  parameters  necessary  for  any  descent 
rate.  Thus,  if  the  descent  rate  were  1500  FPH, 
values  of  AF  =  724  feet  or  TCHD  =  29  seconds  could 
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TABLE  E-2-3 


PROTECTION  PARAMETERS  AS  A  FUNCTION 
OF  DESCENT  RATES 


DESCENT 

RATE 

(FPM) 

TOTAL  DISTANCE  TO 

LEVEL  OFF  (LOD) 

(FEET) 

AF  - 

(LOD  +  100  +  310) 

(FEET) 

TCMD  - 

AF/ZD 

(SECONDS) 

500 

95 

505 

61 

1000 

199 

609 

37 

1500 

314 

724 

29 

2000 

435 

845 

25 

2500 

567 

977 

23 

3000 

706 

1116 

- 

22 

4000 

1012 

1422 

21 

THIS  TABLE  APPLIES  FOR  A  "SINGLE  HIT"  LOGIC 

(ADVISORIES  ARE  ISSUED  WHEN  THE  ALERT  CRITERIA 
ARE  MET  ON  JUST  ONE  SCAN) 


be  used.  Whenever  the  reported  separation  was 
smaller  than  724  feet  an  advisory  would  be  issued. 
If  the  pilot  responds  to  +  his  command  (with  a 
maximum  delay  of  4  seconds)  the  final  separation 
achieved  would  be  at  least  100  feet. 

The  use  of  a  variable  threshold  is  not  being 
advocated  here-  Father,  this  data  can  be  used  to 
find  a  single  value  for  AF  and  a  single  value  for 
•tCHD  that  will  serve  for  all  normal  descent  rates. 

In  the  current  ATAFS  logic,  the  same  detection 
time  threshold  (TCMD)  is  used  in  both  the 
horizontal  and  the  vertical  time  tests  for  an 
alert.  The  current  logic  does  not  take  into 
account  the  vertical  time  to  closest  approach  and 
the  horizontal  time  to  closest  approach  in 
deciding  whether  *o  resolve  a  conflict  using 
horizontal  or  vertical  maneuvers.  Consequently, 
it  is  important,  that  the  sane  alert  times  continue 
to  be  used  for  horizontal  and  vertical  time  tests. 
Otherwise,  insufficient  time  may  be  available  for 
resolution  in  ■♦•he  dimension  that  has  been 
selected.  To  illustrate  this  point,  suppose  that 
ATAFS  were  to  use  32  seconds  for  a  horizontal  tine 
threshold  and  20  seconds  for  a  vertical  time 
threshold.  If  two  aircraft  converging  in  altitude 
were  on  a  collision  course,  *he  vertical  tiBe  to 
collision  would  be  identical  +o  ♦he  horizontal 
time  to  collision  at  any  time  prior  to  collision. 
The  alert  will  only  go  off  when  20  seconds  of 
escape  time  are  left  because  the  vertical 
criterion  will  not  be  satisfied  prior  to  this 
point.  if  the  ATAFS  logic  has  decided  that 
resolution  should  take  place  in  the  horizontal 
dimension,  this  20  seconds  of  escape  time  nay  be 
insufficient. 

The  current  ATAFS  logic  uses  a  value  of  TCMD  of  32 
seconds  with  a  two-out-of-three  requirement.  This 
is  equivalent  to  a  value  of  about  27  seconds 
without  the  two-out-of-three  requirement. 

Pxtensive  experience  has  been  gained  with  AT APS  to 
show  that  this  value  is  appropriate  for  the 
horizontal  detection  parameter.  Thus,  +he 
vertical  logic  should  be  constrained  +o  use  a  TCMD 


value  no  snaller  than  this.  It  is  fruitless  to 
use  a  value  larger  than  this,  because  the 
horizontal  tine  tests,  in  true  collision  courses, 
will  prevent  an  alert  fron  being  generated  prior 
to  27  seconds  from  collision.  Bence,  a  value  of 
TCHD  of  27  seconds,  for  use  without  a  two-out-of- 
three  logic  is  indicated.  Table  F-2-3  shows  that 
with  such  a  threshold,  protection  can  be  provided 
for  all  descent  rates  that  are  2000  FPH  or  higher. 
This  tau  threshold  alone,  however,  will  not  be 
enough  to  provide  protection  for  the  slowly 
descending  aircraft.  Some  of  them  would  have  cone 
too  close  to  the  level  aircraft  by  the  tine  the 
tau  threshold  were  recorded.  A  value  of  AF  of  750 
feet  js  needed  to  provide  protection  for  slowly 
descending  aircraft.  When  the  two-out-of-three 
reauirenent  is  added,  it  is  found  that  AF  should 
have  a  value  of  850  feet.  However,  equivalent 
oro*ec+ion  can  be  achieved  if  AF  is  kept  at  750 
teet  tut  the  TAF  paraneter  used  to  bypass  the  two- 
out-of-three  reguirenent  is  also  set  to  750  feet. 

•’’o  this  point,  the  analysis  has  assuned  that  all 
resolution  was  being  achieved  through  stopping  the 
vertical  rate  of  the  descending  aircraft.  The 
logic  to  deternine  when  positive  resolution 
advisories  should  be  given  is  now  addressed. 

The  vertical  miss  distance  logic  was  previously 
shown  to  be  responsible  for  numerous  unnecessary 
positive  resolution  advisories.  The  preceding 
analysis  has  shown  that,  when  one  aircraft  is 
descending,  safe  resolution  can  be  achieved  merely 
by  stopping  the  vertical  rafe  of  the  descending 
aircraft.  Thus,  positive  advisories  are 
unnecessary  and  the  vertical  miss  distance  test  is 
not  needed  in  this  case.  Positive  advisories  are 
needed  when  both  aircraft  are  in  level  flight  at 
nearlv  the  same  altitude.  But  in  this  case,  the 
vertical  ra*e  is  zero  and  vertical  miss  distance 
reduces  to  lust  the  current  vertical  separation. 
Hence,  the  use  of  the  vertical  miss  distance 
calculation  in  unnecessary.  Determining  whether 
posi+ive  or  negative  resolution  advisories  should 
be  given  can  be  done  on  the  basis  of  current 
vertical  separation.  This  can  be  achieved  by 
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changing  the  projection  time  parameter  in  the 
vertical  miss  distance  calculation,  TVPCBD,  from 
30  seconds  to  zero.  Then,  the  current  vertical 
separation  will  be  compared  to  the  threshold, 
ASFPL,  which  has  a  nominal,  value  of  470  feet. 

This  value  for  ASEPI  is  recommended  by  the 
analysis  in  Reference  3  when  altimetry  errors  are 
those  found  in  general  aviation  aircraft. 

Reference  3  presented  the  tradeoff  between 
unnecessary  alarms  and  missed  detections  caused  by 
altimetry  errors,  as  ASEPI  was  varied  over  a  broad 
range. 

In  summary,  the  current  analysis  suggests  that  the 
vertical  miss  distance  calculation  should  be 
eliminated  and  that  a  value  of  32  seconds  for 
TCMD ,  750  feet  for  AF,  and  750  feet  for  TAF  should 
be  used  with  a  two-out-of-three  logic. 

F-2. 7 _ Performance  With  Hew  Parameter  Values 

The  simulations  of  the  clearance  followed  and  the 
clearance  broken  scenarios  conducted  previously 
were  repeated  with  the  new  parameter  values 
derived  in  the  preceding  section.  Figure  E-2-7 
shows  the  scatter  plot  for  the  protection  afforded 
by  ATARS  with  the  AF  and  TAF  thresholds  changed  to 
T50  feet.  In  addition,  the  V HD  computations  have 
been  altered  so  that  the  30  second  projections 
have  been  eliminated.  Thus,  positive  commands  are 
only  issued  if  the  current  reported  vertical 
separation  is  less  than  470  feet.  Figure  E-2-7 
shows  that  sufficient  projection  against  vertical 
conflicts  can  indeed  be  provided  by  ATARS  with  AF 
and  'nAF  changed  to  750  feet.  Regardless  of  the 
ver+ical  speed,  the  minimum  separation  is  never 
less  than  100  feet. 

Table  E-2-4  provides  alert  rates  from  ATARS  with 
this  new  set  of  parameters  when  clearances  are 
followed.  Percentages  of  cases  in  which  an 
advisory  is  issued  are  provided  for  different 
combinations  of  descent  rates  and  final  separation 
values  as  was  done  in  obtaining  the  data  in  Table 
F-2-1.  The  data  for  each  combination  represents  a 
sample  size  of  64  encounters. 
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VERTICAL  SEPARATION  AT  C7.0SEST  APPROACH  -  FEET 
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FIGURE  E-2-7 

PROTECTION  PROVIDED  IN  VERTICAL  CONFLICTS  WITH 
REDUCED  ATARS  PARAMETERS 
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Table  E-2-4  shows  considerable  improvement,  in 
terms  of  lover  rates  of  unnecessary  alarms,  over 
the  data  in  Table  E-2-1,  which  provided  alert 
rates  for  the  current  ATARS.  Both  the  positive 
and  negative  advisory  rates  are  significantly 
lower.  An  aircraft  descending  at  1000  FPM  to  a 
cleared  altitude  which  is  1000  feet  away  from 
another  aircraft  will  never  receive  a  positive 
advisory,  and  will  receive  a  negative  advisory  6* 
of  the  time.  Such  an  advisory  will  only  be  issued 
to  aircraft  which  are  already  at  their  cleared 
altitude  or  are  very  close  to  it.  If  a  pilot 
approaches  the  same  altitude  at  2000  FPM,  he  may 
expect  to  receive  a  negative  advisory  with  about 
50*  probability.  Such  an  advisory  would  be  issued 
just  prior  to  initiation  of  the  level-off  and 
should  not  be  a  problem. 

when  approaching  a  final  separation  of  500  feet  at 
500  FPM  there  are  no  positive  advisories.  This  is 
primarily  because  the  aircraft  has  already 
received  a  negative  advisory  when  750  feet  away 
from  the  level  aircraft.  At  higher  descent  rates, 
positive  advisories  are  issued  because  of  greater 
distances  covered  by  the  aircraft  after  receiving 
■•■he  negative  advisories.  With  a  2000  FPM  descent 
rate,  77*  of  the  encounters  result  in  positive 
advisories. 

The  positive  advisories  issued  when  approaching  a 
final  separation  of  500  feet  are  tied  to  the 
threshold  of  separation,  ASEPL,  which  has  a  value 
of  470  feet.  The  only  way  the  positive  advisory 
counts  can  be  further  reduced  is  by  reduction  of 
this  threshold.  The  value  of  this  threshold  is 
dependent  upon  altimetry  errors.  Reference  3 
shows  that  reduction  of  this  threshold  to  a  value 
between  300  and  400  feet  causes  a  three-fold 
increase  in  missed  detections  relative  to  a 
threshold  of  470  feet.  A  reduction  in  ASEPL  is 
not  recommended  when  the  aircraft  have  altimetry 
errors  comparable  to  those  reported  in  Reference 
3. 
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’’’he  results  of  the  preceding  section  show  that 
unnecessary  positive  advisories  can  usually  be 
avoided  for  final  separations  of  500  feet  or  1000 
feet  if  descent  rates  are  kept  below  1000  FPM. 

"he  Airman's  Inforaation  Manual  (AIN)  (Reference 
4)  recommends  a  practice  that  would  satisfy  this 
condition.  The  AIM  states:  "Descend  or  clisfc  at 
an  optiaua  rate  consistent  with  the  operating 
characteristics  of  the  aircraft  to  1000  feet  above 
or  below  the  assigned  altitude,  and  then  atteapt 
to  descend  or  cliab  at  a  rate  of  500  feet  per 
minute  until  the  assigned  altitude  is  reached." 

Suppose  a  level  aircraft  is  1000  feet  away  froa 
the  cleared  altitude  of  a  descending  aircraft.  If 
■••he  pilot  of  the  descending  aircraft  were  to 
follow  the  recommendations  of  AIM,  he  would  reduce 
his  vertical  rate  to  500  FPM  when  within  2000  feet 
of  the  level  aircraft.  With  AF  and  TAF  *  750  feet 
and  ASEPI  =  470  feet,  such  an  aircraft  will 
’rriqger  neither  positive  nor  negative  advisories. 
If  the  level  aircraft  were  500  feet  away  froa  the 
cleared  altitude  of  the  descending  aircraft,  the 
latter  would  have  slowed  to  a  500  FPM  rate  at  1500 
feet  vertical  separation  from  the  other  aircraft. 
Shortly  before  reaching  its  cleared  altitude,  it 
would  usually  receive  a  negative  advisory. 

While  500  FPM  is  a  reasonable  rate  for  saall 
aircraf*,  it  may  be  too  low  in  practice  for  high 
performance  aircraft.  Aircraft  have  been  observed 
in  real  world  traffic  samples  usinr;  higher  rates 
to  approach  the  level-off.  The  use  of  a  vertical 
speed  limit  procedure  has  been  suggested  as  a 
means  of  limiting  the  vertical  speed  of  aircraft 
in  such  situations.  If  such  a  procedure  were 
implemented,  ATABS  would  calculate  the  aaxiaua 
vertical  speed  permitted  and  would  uplink  this 
limit  for  display  in  the  cockpit  of  the  aircraft 
with  the  vertical  rate.  Such  a  liait  would  only 
be  displayed  when  a  threat  aircraft  was  present  at 
an  adiacent  cruising  altitude  and  the  aircraft 
with  the  vertical  rate  was  actually  exceeding  the 
vertical  rate  liait. 
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In  order  for  the  vertical  speed  lisit  to  be 
effective  in  avoiding  sone  positive  advisories,  it 
must  be  issued  at  a  tine  veil  in  advance  of  the 
positive  advisory  alert  time.  The  horizontal 
alert  time  for  tne  vertical  speed  limit  advisory 
should  be  the  same  as  the  vertical  alert  time. 

With  longer  alert  times  for  vertical  speed  limit 
advisories,  ATARS  may  issue  vertical  speed  limits 
in  situations  in  which  a  pilot  in  visual  flight 
conditions  would  prefer  to  maneuver  horizontally. 
Since  ATARS  has  no  knowledge  of  the  cleared 
altitudes  for  aircraft,  it  does  not  know  when  a 
pi  lot  might  prefer  to  maintain  his  vertical  rate 
and  mate  a  horizontal  avoidance  maneuver. 

The  flashing  Proximity  Warning  Indicator  (PWI) 
message,  which  is  provided  by  the  current  ATARS, 
could  also  be  expected  to  alert  the  pilot  to  the 
presence  of  another  aircraft  above  or  below  his 
cleared  altitude.  It  would  be  natural  to  expect 
tha+  a  pilot  would  reduce  his  vertical  rate  as  he 
approaches  his  cleared  altitude,  when  he  has 
received  a  flashing  PWI  message  indicating  another 
aircraft  above  or  below  his  altitude.  If  the 
pilot  were  descending  and  encountered  a  threat 
when  not  near  a  cleared  altitude,  the  flashing  PWI 
would  provide  an  indication  of  the  threat  but 
would  not  unnecessarily  constrain  the  pilot's 
actions.  A  vertical  speed  limit  advisory  at  an 
early  alert  time  would  constrain  the  pilot's 
vertical  rate,  even  though  other  actions  might 
avoid  a  conflict.  With  the  presence  of  the 
flashing  PWI  message  in  the  ATARS  design,  the  use 
of  an  additional  procedure  for  limiting  vertical 
speeds  well  in  advance  of  positive  advisories  is 
considered  unnecessary. 

A  second  type  of  vertical  speed  linit  logic  has 
been  suggested.  In  this  logic,  the  vertical  speed 
limit  advisory  would  be  issued  at  the  sane  alert 
time  as  would  a  positive  or  negative  resolution 
advisory.  The  vertical  speed  limit  advisory  would 
be  issued  in  place  of  a  positive  or  negative 
advisory  in  certain  situations  involving  aircraft 
with  high  vertical  rates.  This  type  of  logic 
shows  promise  of  reducing  the  positive  advisory 
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rate  in  these  types  of  encounters  in  which 
horizontal  closest  approach  occurs  before  the 
aircraft  reach  the  sane  altitude.  The  application 
of  this  type  of  vertical  speed  liait  to  ATARS 
should  be  investigated  in  an  additional  study. 

E-  2..  9 _ Considerations  When  One  Aircraft  j.s 

UQ£9i!  i££€d 

The  preceding  investigation  was  conducted  under 
■►he  assumption  that  both  aircraft  were  eguipped 
with  ATARS  and  would  be  able  to  receive  resolution 
advisories.  However,  the  logic  that  was  developed 
is  also  appropriate  for  the  case  in  which  one 
aircraft  is  not  eguipped  with  ATARS.  It  is  the 
purpose  of  this  section  to  explain  why  this  is  so. 

In  the  current  ATARS,  the  TCHD  alert  tiae 
parameter  is  increased  for  an  encounter  in  which 
one  aircraft  is  unequipped,  if  the  unequipped 
aircraft  has  a  horizontal  speed  Bore  than  1.5 
times  greater  than  the  speed  of  the  equipped 
aircraft.  Otherwise,  the  value  for  TCHD  is  the 
same  as  for  encounters  with  both  aircraft 
equipped.  Assume  that  the  equipped  aircraft  is 
descending  and  the  unequipped  aircraft  is  level. 
The  previous  study  showed  that  safe  separation 
could  be  provided  simply  by  stopping  the  vertical 
rate  of  the  descending  aircraft.  Hence,  in  this 
case  the  same  parameters  as  used  for  encounters 
with  both  aircraft  eguipped  would  be  adequate. 

The  same  parameters  will  be  used  unless  the 
unequipped  aircraft  is  more  than  1.5  times  faster 
than  the  equipped  aircraft.  If  this  latter 
condition  exists,  it  implies  that  the  equipped 
aircraft  is  a  lower  performance  aircraft  which 
would  be  likely  to  use  lower  vertical  rates.  When 
lower  rates  are  used,  the  alerts  are  triggered  by 
the  current  altitude  separation  threshold,  AI, 
which  has  the  saae  value  whether  or  not  both 
aircraft  are  eguipped.  Only  if  the  unequipped 
aircraft  were  more  than  1.5  times  faster  than  the 
equipped  aircraft,  and  the  equipped  aircraft  were 
descending  at  a  higher  rate,  would  a  difference  be 
noted.  The  difference  is  that  negative  advisories 
would  be  issued  at  a  slightly  higher  altitude.  No 
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difference  in  the  presentation  of  positive 
advisories  would  be  noted. 

Now  consider  the  case  in  which  the  unequipped 
aircraft  is  descending  and  the  equipped  aircraft 
is  level.  In  this  case,  it  is  not  possible  to 
stop  the  vertical  rate  of  the  descending  aircraft. 
However,  the  current  ATABS  design,  in  the  advisory 
selection  logic,  senses  for  an  encounter  in  which 
an  unequipped  aircraft  has  a  vertical  rate  towards 
the  equipped  aircraft.  When  this  situation  is 
found,  resolution  is  perforaed  with  horizontal 
maneuvers. 

Thus,  the  changes  reconsended  previously  for  the 
case  of  both  aircraft  eguipped  also  seea  justified 
when  one  aircraft  is  unequipped. 
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It  has  been  suggested  that  ATARS  sight  provide  a 
limited  form  of  service  in  some  en  route  airspaces 
by  being  implemented  as  a  part  of  long-range  DABS 
sensors  which  have  a  scan  period  of  10  seconds. 
Peference  2  has  shown  that  ATARS  cannot  provide  a 
satisfactory  service  as  an  aid  to  see-and-avoid 
using  this  scan  period.  However,  the  preceding 
analysis  has  been  extended  to  present  results  with 
a  10  second  scan  period  that  could  be  used  in 
considering  ATARS  for  a  more  limited  role. 

The  communications  delay  due  to  the  scanning  radar 
is  between  1  and  2  times  +he  scan  period.  (This 
is  +rue  for  a  single  hit  logic.  An  additional 
scan  period  of  delay  is  introduced  if  a  two-out- 
of-three  requirement  is  added.)  To  show  this, 
consider  that  the  altitude  separation,  for  a 
scenario  with  one  aircraft  descending,  drops  below 
the  immedia+e  altitude  threshold  just  an  instant 
after  the  radar  has  scanned  the  aircraft.  ATARS 
will  no+  trigger  the  alert  until  the  following 
scan  and  will  not  deliver  the  advisory  to  the 
aircraft  until  the  scan  after  that.  In  this  case, 
the  communications  delay  is  *wo  scan  periods.  If 
the  altitude  separation  drops  below  the  threshold 
iust  an  instant  before  the  radar  scans  the 
aircraft,  the  delay  is  one  scan  period.  On  the 
average  +  he  delay  is  1.5  times  the  scan  period. 

the  DABS  scan  period  were  ten  seconds,  the 
communications  delay  would  be  an  average  of  15 
seconds,  or  9  seconds  more  than  that  for  the 
4-second  scan  period.  This  increase  in 
communications  time  requires  an  increase  in  the 
detection  threshold  values  (the  tau-threshold  and 
the  immediate  altitude  threshold).  This  increase 
in  the  communications  time  would  also  require 
changes  to  the  horizontal  conflict  detection 
parameters. 

The  maximum  usable  value  for  AF  is  1000  feet  since 
this  value  represents  the  minimum  IFR-IFB  vertical 
separation  and  since  IFR  aircraft  are  routinely 
separated  by  this  distance.  An  analysis  similar 


to  that  conducted  in  Section  E-2.6  was  used  to 
find  an  initial  value  for  TCHD,  given  that  AF  was 
constrained  to  be  1000  feet.  Several  sinulations 
of  the  clearance  broken  scenarios  of  Figure  E-2-1 
were  conducted,  in  which  the  values  of  TCHD  were 
varied  around  this  initial  value.  The  smallest 
value  of  TCHD,  that  provided  no  ainiaua 
separations  less  than  100  feet  on  the  scatter 
plot,  was  selected  as  the  appropriate  value  to  be 
used  with  a  10  second  scan  period.  This  value  was 
46  seconds.  Figure  E-3-1  shows  the  scatter  plot 
for  TCHD  =  46  seconds  and  AF  and  ^HF  =  1000  feet. 

Table  F-3-1  shows  the  unnecessary  alarns  produced 
wi*h  the  above  parameter  set  when  the  descending 
aircraft  follows  its  level-off  clearance.  The 
same  scenario  as  in  Figure  E-2-2  was  used. 
Variations  in  parameters  were  made  to  create  a 
sample  size  of  64  encounters  for  each  combination 
of  final  separation  and  descent  rate,  as  was  done 
previously. 

The  data  in  Table  E-3-1  can  be  compared  to  that  in 
Table  v-2-4.  The  unnecessary  alarm  performance  of 
ATAFS  with  a  ten  second  scan  period  is  seen  to  be 
worse  than  with  a  4.7  second  scan  period, 
particularly  at  a  final  separation  of  1000  feet. 

At  500  *PH  descent  rates,  with  the  ten  second  scan 
period,  negative  advisories  are  issued  about  a 
third  of  the  time.  At  higher  rates,  negative 
advisories  are  issued  most  of  the  time.  The 
impact  of  the  larger  communications  delay  is  to 
create  more  variability  in  ♦he  resolution.  In 
order  to  provide  assurance  that  vertical 
separations  of  at  least  100  feet  can  be  achieved, 
more  conservative  resolution  must  be  accepted  in 
some  cases.  This  is  evident  in  comparing  Figures 
E-2-7  and  E-3-1.  With  the  ten  second  scan  period, 
many  more  encounters  result  in  final  separations 
in  excess  of  1000  feet. 

From  these  results,  it  may  be  concluded  that  ATAFS 
could  provide  protection  against  broken  altitude 
clearances  with  a  ten  second  scan  period,  if  a 
look-ahead  time  of  46  seconds  were  used  in 
conjunction  with  an  immediate  altitude  threshold 


E-  3-2 


VERTICAL  SEPARATION  AT  CLOSEST  APPROACH  -  FEET 
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FIGURE  E-3-1 

PROTECTION  PROVIDED  IN  VERTICAL  CONFLICTS  BY 
ATARS  WITH  TEN  SECOND  SCAN  PERIOD 
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POSITIVE  ADVISORY  THRESHOLD  (ASEPL)  =  470  FEET 
NO  VERTICAL  MISS  DISTANCE  CALCULATION 


of  1000  feet.  However ,  the  naaber  of  unnecessary 
alaras  and  the  naaber  of  excessive  separations 
would  be  increased  substantially  over  those 
experienced  with  a  4.7  second  scan  period. 

The  acceptability  of  service  provided  by  ATAPS 
with  a  ten  second  scan  period  depends  upon  how 
well  pilots  can  adapt  to  these  unnecessary  alara 
rates  and  upon  their  attitudes  toward  an  ATAPS 
service  that  provides  less  opportunity  to  acquire 
another  aircraft  before  receiving  resolution 
advisories.  The  current  ATAPS  provides  flashing 
PWI  messages  at  45  second  tau  values.  Peference  2 
has  shown  that  it  is  difficult  for  pilots  to 
acquire  another  aircraft  at  tau  values  in  excess 
of  45  seconds.  Since  the  resolution  advisory  must 
be  given  at  46  seconds,  a  flashing  PWI  presented 
in  advance  of  this  time  would  probably  not  be 
effective. 
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»-4.  SOHHABT  AND  CONCIOSIOHS 


The  current  version  of  ATABS  (i.e.,  as  described 
in  Feference  1)  provides  sufficient  protection 
against  vertical  conflicts  involving  aircraft  with 
altimetry  errors  comparable  to  those  of  a  vide 
segment  of  the  general  aviation  population. 
Assuming  a  4  second  delay  in  pilot  and  aircraft 
response  to  advisories,  and  a  0.25g  vertical 
acceleration,  vertical  conflicts  can  be 
effectively  resolved  by  issuing  vertical 
advisories  alone. 

However,  when  an  aircraft  levels  off  at  an  ATC- 
assigned  altitude  500  or  1000  feet  away  from 
another  aircraft,  with  which  it  is  in  horizontal 
conflict,  the  current  ATABS  issues  a  large  number 
of  unnecessary  alarms.  With  two  minor  changes  in 
the  ATABS  logic  and  parameter  values,  these 
unnecessary  alarms  can  be  significantly  reduced 
wi+hout  loss  of  protection.  These  changes  are: 

1.  Beduction  of  the  immediate  altitude 
threshold  (AF)  from  1000  feet  to  "*50  feet.  A 
corresponding  reduction  in  the  tvo-out-of- 
three  bypass  parameter  (TAF)  to  T50  feet 
should  also  be  made. 

2.  Flimination  of  the  the  vertical  miss 
distance  calculation  (achieved  by  setting 
<rVPCHD  to  zero). 

If  an  aircraft  that  is  descending  at  a  rate  less 
than  2500  FPU  levels  off  at  1000  feet  above 
another  aircraft,  ATABS,  with  the  changes 
described  above,  will  either  issue  no  advisories 
or  will  issue  negative  advisories  when  the 
aircraft  is  very  close  to  level-off.  For  a  final 
separation  of  500  feet,  the  aircraft  will  receive 
negative  advisories  as  it  approaches  the  cleared 
altitude  if  it  has  a  vertical  rate  less  than  1000 
FPH.  At  vertical  rates  of  1000  FPU  or  more,  a 
significant  number  of  unnecessary  advisories  will 
be  experienced,  either  in  the  form  of  negative 
advisories  issued  well  before  the  aircraft  reaches 
the  assigned  altitude  or  in  the  form  of 


unnecessary  positive  advisories. 

Fven  with  these  modifications,  the  ATARS  logic  is 
sensitive  to  abrupt  level-offs  fro*  high  descent 
rates.  To  alleviate  this  sensitivity,  a  fora  of 
selective  vertical  speed  control  would  be 
desirable.  One  approach  would  be  for  ATARS  to 
advise  the  pilot  of  an  aircraft  wj.th  a  vertical 
ra+e  to  limit  his  rate  if  there  is  a  threat 
aircraft  near  his  assigned  altitude.  To  be  most 
effective  in  avoiding  unnecessary  positive  or 
negative  advisories,  such  a  vertical  speed  limit 
advisory  should  be  given  15-20  seconds  earlier 
than  the  positive  or  negative  alert  time. 

However,  ATARS  does  not  have  knowledge  about 
assigned  altitudes  and  A TABS  cannot  know  when  a 
pilot  would  prefer  to  maintain  his  vertical  rate 
and  avoid  his  traffic  with  a  horizontal  maneuver. 
*T'hus,  it  is  recommended  that  the  flashing  PWl 
message  from  the  current  ATARS  logic  be  used  to 
indicate  when  a  pilot  should  reduce  his  vertical 
ra+e.  Pilots  should  be  made  aware  that  if  they 
receive  a  flashing  PWl  indicating  a  threat  below, 
when  they  are  descending  at  a  high  rate,  there  is 
a  high  probability  of  unnecessary  alarms.  The  use 
of  a  vertical  speed  limit  advisory  issued  at  the 
same  alert  tine  as  used  for  positive  and  negative 
advisories  should  be  studied  further  for  possible 
application  in  the  ATARS  logic. 

The  protection  parameters  required  for  vertical 
conflict  resolution  increase  with  an  increase  in 
the  radar  scan  period.  With  a  ten  second  scan 
period,  ATARS  would  need  46  seconds  of  lead  time 
in  conjunction  with  an  immediate  altitude 
threshold  of  1000  feet  to  guarantee  a  minimum 
vertical  separation  of  100  feet.  The  increase  in 
the  number  of  unnecessary  alarms  and  the  increase 
in  number  of  resolutions  with  excessive 
separation,  above  those  for  a  4.7  second  scan 
period  are  significant.  Whether  these  increases 
are  acceptable  depends  upon  the  application 
envisioned  for  ATARS  with  a  ten  second  scan 
period.  This  judgment  cannot  be  made  here. 
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APPENDIX  F 

IMPACT  OF  IMPROVED  VERTICAL  SURVEILLANCE 
ON  AUTOMATIC  SEPARATION  ASSURANCE 


A.  D.  Mundra 


F-1.  INTRODUCTION 

’’'he  A3r  traffic  Control  Radar  Beacon  System 
(ATCRBS)  is  capable  of  automatically  obtaining 
altitude  data  from  aircraft  equipped  with  altitude 
reporting  transponders.  Such  a  transponder,  in 
response  to  Bode-C  interrogations  by  the  radar, 
downlinks  the  aircraft’s  barometric  altitude 
quantized  in  hundreds  of  feet.  •’’he  altitude  is 
thus  downlinked  once  per  scan  of  ♦he  ground  radar. 
This  constitutes  the  vertical  surveillance 
available  in  the  current  Air  Traffic  Control  (ATC) 
system. 

"he  Federal  Aviation  Administration  (FAA)  has 
deployed  an  automatic  separation  assurance  system 
element  called  En  Route  Conflict  Alert  (see 
Reference  1)  in  the  en  route  portion  of  ♦he 
National  Airspace  System  (NAS).  En  Route  Conflict 
Alert  serves  as  an  aid  to  the  ATC  controllers  to 
help  reduce  involuntary  violations  of  aircraft 
separation  minima  for  aircraft  in  flight.  The  FAA 
is  also  actively  developing  +wo  other  fully 
automated  separation  assurance  system  elements: 
Automated  Traffic  Advisory  and  Resolution  Service 
(ATARS)  and  Beacon  Collision  Avoidance  System 
(BCAS)  .  Since  vertical  surveillance  is  the 
primary  means  of  monitoring  separation  in  the 
vertical  plane,  it  is  of  key  importance  in  all 
these  separation  assurance  system  elements. 

Appendix  F  showed  that  it  is  difficult  to  provide 
protection  against  broken  (viola+ed)  altitude 
clearances  when  the  scan  period  of  the  radar  is  10 
seconds.  Rn  Route  Conflict  Alert  operates  with 
data  from  radars  that  have  scan  periods  of  10  or 
12  seconds.  Certain  improvements  in  vertical 
surveillance  that  would  be  possible  with  the 
Discrete  Address  Beacon  System  (DABS)  seem  to 
offer  potential  for  better  protection  against 
broken  altitude  clearances.  This  study  identifies 
♦he  possible  improvements  in  the  current  vertical 
surveillance  system.  The  benefits  that  might  be 
realized  from  these  improvements  are  analyzed  in 
detail  in  Section  F-2.  This  study  was  conducted 
using  the  En  Route  Conflict  Alert  logic  as  the 
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vehicle  for  shoving  the  inpact  of  inprovenents  in 
vertical  surveillance.  The  iapact  of  these 
inprovenents  on  ATARS  vas  then  inferred  froa  the 
results  of  the  study  with  Conflict  Alert.  Section 
F-3  contains  a  suaaary  of  the  results  and 
conclusions. 


*■-2.  VERTICAT,  S0FVEII1ANCE  THPPOVBHBIITS 

Section  F-2.  1  describes  the  problem  of  altitude 
clearance  violations  and  the  logic  incorporated  in 
♦he  current  En  Foute  Conflict  Alert  systen  to  deal 
with  it.  Sections  P-2.2,  ’?-2.3,  P-2.4,  and  P-2.5 
identify  various  possible  improvements  and  their 
impact  on  the  performance  of  En  Foute  Conflict 
Alert.  Section  F-2. 6  presents  the  impact  that 
these  improvements  would  have  on  ATARS. 

F- 2 . 1 _ Altitude  clearance  Violations  and  En 

Foute  Conflict.  Alert 


'"’he  National  Aeronautics  and  Space  Administration 
(NASA)  has  been  conducting  an  Aviation  Safety 
Reporting  Program  since  1977.  Data  from  this 
effort  has  identified  violations  of  altitude 
clearances  as  a  significant  source  of  near  mid-air 
collisions  in  aviation.  Further,  most  of  the 
altitude  deviations  reported  in  this  data  base 
involved  Instrument  Flight  Pules  (IFF)  aircraft 
(i.e.,  aircraft  within  the  ATC  System).  (See 
Volume  IT.)  Protection  against  altitude  clearance 
violations  is  thus  a  tangible  service  that  En 
Foute  Conflict  Alert  might  provide.  En  Foute 
Conflict  Alert  specifically  uses  altitude 
clearance  information  in  its  threat  detection 
logic  and  also  contains  criteria  for  detecting 
violations  of  altitude  clearances.  This  logic  is 
now  reviewed. 

Conflict  Alert  projects  each  of  its  aircraft  120 
seconds  into  the  future  and  checVs  for  violation 
of  certain  separation  standards.  If  two  aircraft 
are  projected  to  be  within  1000  feet  of  each  other 
vertically,  and  conflict  conditions  *n  the 
horizontal  dimension  are  also  satisfied,  a 
conflict  is  declared.  If  an  aircraft  has  a 
vertical  rate  which  results  in  the  aircraft 
crossing  its  assigned  altitude  within  +he  120 
second  projection,  En  Foute  Conflict  Alert  assumes 
♦hat  the  aircraft  will  continue  its  ra*e  to  the 
assigned  altitude  and  then  will  proceed  level  at 
that  altitude.  Thus,  the  aircraft  will  be  assumed 
to  be  at  the  assigned  altitude  at  the  end  of  the 
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120  second  projection  interval. 

Conflict  Alert  has  a  tracking  logic  which  derives 
estimates  of  vertical  velocity  by  tracking  the 
Hode-C  altitude  reports  fron  the  transponders. 
However,  Conflict  Alert  has  a  feature  that 
disables  the  tracking  logic  when  an  aircraft  is 
within  200  feet  of  its  assigned  altitude.  In  this 
case,  the  aircraft  is  considered  to  be  level  and 
at  its  assigned  altitude. 

Conflict  Alert  has  an  additional  feature  which 
checks  for  broken  altitude  clearances.  If  at  sone 
point  both  the  tracked  altitude  and  the  reported 
altitude  are  found  to  be  nore  than  200  feet  past 
the  assigned  altitude,  then  Conflict  Alert  assuaes 
that  the  clearance  has  been  broken  and  projection 
with  the  current  tracked  vertical  rate  is  resuned. 
If  there  should  be  another  aircraft  in  such  a 
position  that  the  pair  would  satisfy  conflict 
conditions  (i.e.,  violation  of  separation 
standards  within  120  seconds),  then  a  conflict 
would  be  declared. 

Hode-C  altitude  reports  are  rounded  to  the  nearest 
hundred  feet.  Tracked  altitude  can  be  on  either 
side  of  reported  altitude  depending  upon  the 
♦rack's  history.  Considering  constant  rate  cliabs 
or  descents,  the  liklihood  of  the  tracked  altitude 
being  greater  than  the  reported  altitude  is  the 
saae  as  it  being  less.  If  the  difference  between 
tracked  and  reported  altitude  were  not  more  than 
100  feet,  then  the  logic  for  declaring  a  broken 
altitude  clearance  would  be  equivalent  to  a  siaple 
logic  which  only  monitors  reported  altitudes  and 
declares  the  clearance  broken  when  the  report  is 
300  feet  past  the  assigned  altitude.  In  this 
study,  this  simplified  logic  is  used  to  avoid  the 
problem  of  estimating  tracked  altitudes.  The 
extent  to  which  this  logic  will  declare 
"clearances  broken"  nore  often  than  the  actual 
Conflict  Alert  algorithm  depends  upon  the  expected 
value  of  the  difference  between  tracked  altitude 
and  reported  altitude.  This  difference  is  assumed 
to  be  small. 
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Figure  F-2-1  shows  the  implications  of  this 
simplified  "clearance  broken"  logic.  Aircraft  1 
is  assigned  altitude  ZA1  and  is  descending  at  DR 
feet  per  ainute.  If  Aircraft  1  follows  its 
clearance,  it  will  level-off  at  ^A1  which  aeans 
that  ♦he  altitude  indicated  by  its  altimeter  will 
then  be  ZA1.  The  reported  altitude  will  be  ZR1, 
which  is  different  from  7A1  by  CE1,  the  aircraft* 
correspondence  error. 

If  Aircraft  1  should  break  its  clearance,  its 
altitude  will  continue  to  decrease  past  ZR1.  At 
point  B  where  its  reported  altitude  becomes  (ZA1 
300) ,  Conflict  Alert  declares  that  it  has  broken 
its  clearance  and  resumes  projection  with  the 
vertical  rate  DF.  Suppose  there  is  another 
aircraft.  Aircraft  2,  in  close  horizontal 
proximity.  Let  CE2  be  i*s  correspondence  error, 
let  ZSFP  be  the  nominal  separation  (7A1  -  7A2) 
between  the  two  aircraft.  The  computed  tine  to 
coaltitude,  TCO,  will  then  be  given  by: 

TCO  =  (ZA1-300-ZF2) /DF 

=  (ZA1-ZA2-300-CE2) /D? 

=  (7SEP-300-CE2) /DF 
=  TRL- (CE2/DF) 

Where  TRL  =  nominal  lead  time  at  clearance  broken 
declaration  =  (ZSFP  -  300) /DF. 

The  radar,  however,  does  not  necessarily  observe 
the  broken-clearance  trajectory  at  point  B.  It 
has  to  wait  until  the  antenna  beam  samples  the 
aircraft,  which  may  be  anywhere  from  0  seconds  to 
one  full  scan  time  after  point  B.  Twelve  seconds 
is  assumed  for  the  nominal  en  route  scan  time. 
Thus,  the  scan  time  add£  up  to  12  seconds 
additional  delay  in  detection  of  the  broken 
clearance. 

Figure  F-2-2  shows  the  distribution  of  computed 
lead  tines  to  coaltitude  when  Conflict  Alert 
declares  that  Aircraft  1  has  broken  its  clearance 


FIGURE  F-2-2 

LEAD  TIME  TO  COALTITUDE  (IN  REPORTED  ALTITUDE)  WHEN 
CONFLICT  ALERT  DECLARES  CLEARANCE  BROKEN 


This  distribution  represents  the  lead  tines  that 
will  be  seen  when  aircraft  with  varying 
correspondence  errors  follow  the  clearance-broken 
scenario  of  Pigure  P-2-1.  Also  included  are 
variations  resulting  fro*  differing  phase 
relationships  of  the  aircraft's  vertical  profile 
with  respect  to  *he  antenna  beam  scan.  tCE  and 
-CP  are  +he  limits  of  correspondence  errors  over 
the  population  of  all  aircraft  and  M  is  the 
descent  rate,  The  exac+  shape  of  the  "tails"  of 
the  distribution  depends  upon  the  for*  of  the 
correspondence  error  curve.  The  probability  curve 
shown  is  thus  a  sketch  of  the  expected  curve.  The 
total  range  of  lead  times  for  any  clearance  broken 
scenario  is  (12  ♦  2*CF/DR)  seconds. 

Reference  2  presents  data  on  correspondence  errors 
gathered  in  19^3.  Pilots  were  asked  to  report 
their  altitude  in  a  level  phase  of  flight  and 
their  verbal  reports  were  compared  with  the 
♦ransponder  reported  altitude  displayed  to  the 
controller.  The  data  sample  for  aircraft  under 
20,000  feet  in  an  en  route  sector  consisted  of  78 
reports,  about  half  of  them  being  from  air  carrier 
aircraft.  All  correspondence  errors  were  seen  to 
be  less  than  200  feet  in  magnitude.  This  then  is 
the  value  used  for  CE  in  this  study.  This  value 
is  consistent  with  AT  practice  because 
controllers  will  question  a  pilot  about  his 
altitude  if  they  observe  the  reported  altitude  in 
level  flight  to  be  different  from  the  assigned 
altitude  by  300  feet  or  more.  It  is  also 
consistent  with  the  altitude  broken  rule  of 
Conflict  Alert  described  previously. 

Various  data  sources  were  consulted  to  obtain  a 
reasonable  range  for  descent  rates.  About  four 
hours  of  data  gathered  from  the  Front  Roval  sector 
of  the  Washington  Center  showed  typical  descent 
rates  of  1000  to  3000  FPH.  Rates  of  up  to  3500 
FPH  were  also  occasionally  seen.  Reference  3 
gives  climb  and  descent  rates  used  by  en  route 
facilities  for  Hode-C  reasonableness  checks  and 
shows  rates  of  up  to  4500  FPH.  Occasionally, 
higher  rates  are  listed.  Reference  4  documents 
manufacturer's  data  on  climb  rates  in  normal 
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conditions.  There,  climb  rates  of  up  to  3000  FPH 
are  found  for  different  aircraft  types.  Tor  the 
current  study  a  range  of  vertical  rates  from  1000 
FPM  to  4000  FPM  is  analyzed. 

Vith  values  for  CF  and  DP  known,  it  is  possible  to 
estimate  the  lead  tines  to  coaltitude  when 
Conflict  Alert  discovers  that  an  aircraft,  cleared 
to  some  altitude  above  another  aircraft,  has 
broken  its  clearance.  ^hus,  for  1000  feet 
assigned  separation  and  a  vertical  rate  of  1000 
FPM  for  the  descending  aircraft,  the  nominal  lead 
time  to  coaltitude  would  be  (1000  -  300) / (1000/60) 
=  42  seconds.  Due  to  the  correspondence  error  of 
the  level  aircraft  and  scan  time  delays,  the  lead 
*ime  in  any  particular  situation  may  be  anywhere 
between  54  seconds  and  18  seconds.  (See  Figure 
F-2-2.) 

table  F-2-1  tabulates  the  lead  times  to  coaltitude 
for  various  combinations  of  separations  and 
descent  rates.  Assigned  separations  of  up  to  4000 
feet  and  descent  rates  of  up  to  4000  FPU  are 
considered.  It  should  be  noted  that  this  lead 
time  has  to  provide  for  controller  reaction  time, 
pi lot /aircraft  reaction  time  and  the  actual  escape 
«-ime.  '''hus,  the  actual  escape  time  available  in 
case  of  danger  is  snaller  than  these  lead  times  by 
the  sum  of  controller  reaction  time  and  pilot  and 
aircraft  reaction  times. 

•’’able  F-2-1  reveals  the  Conflict  Alert  capability 
to  protect  against  altitude  clearance  violations 
a*  a  glance.  The  upper  right  hand  region  (cells 
marked  H)  contains  large  lead  times.  This  means 
that  when  nominal  separation  is  large  and  descent 
rates  are  small.  Conflict  Alert  can  provide  ample 
warning  againt  an  impending  conflict  that  may 
result  from  a  broken  clearance.  (Horizontal 
conflict  conditions  are  assumed  to  be  satisfied.) 
In  the  lower  left  region  of  the  table  (cells 
marked  L)  very  low  vertical  lead  times  are  seen. 
Thus,  if  an  aircraf*  with  a  high  vertical  rate 
breaks  a  clearance  when  *here  is  a  small  assigned 
separation,  the  amount  of  warning  provided  by 
Conflict  Alert  is  small.  Sometimes,  as  in  the 
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cases  of  +  he  negative  lead  tines,  the  warning  nay 
be  issued  after  the  reported  altitudes  have 
crossed  each  other. 

while  it  was  not  a  major  objective  of  this  study 
*o  analyze  the  interaction  between  A'f'APS  and  En 
Poute  Conflict  Alert,  there  are  a  few  observations 
relative  to  this  subject  that  can  be  made  from 
Table  F-2-1.  If  ATAPS  were  present  concurrently 
and  appropriate  coordination  with  Conflict  Alert 
were  not  assured,  ATAPS  would  usually  issue 
advisories  t0  the  aircraft  involved  in  the  "L" 
conflicts  before  Conflict  Alert  warns  the 
controller  of  the  conflic4.  This  is  so  because 
ATAPS  alerts  when  the  lead  time  to  coaltitude  is 
less  +han  32  seconds.  It  is  desirable  to  have  a 
time  stagger  between  alerts  derived  from  Conflict 
Alert  and  ATARS  such  that  it  is  Conflict  Alert 
that  provides  the  first  alert.  In  the  MLn  region, 
♦his  desired  protocol  is  not  satisfied.  It  is 
satisfied  in  the  upper  right  "H"  region.  For 
cases  represented  by  the  cells  along  the  main 
diagonal  (those  marked  M)  the  stagger  is  often 
insufficient.  There,  alerts  derived  by  ATAPS  and 
Conflict  Alert  may  be  delivered  to  the  pilot  at 
abou4  +he  same  time.  If  the  lead  times  in  Table 
F-2-1  could  be  increased  in  the  bottom  left 
regions,  greater  protection  from  Conflict  Alert  in 
cases  of  broken  altitude  clearances  would  be 
obtained  and  the  time  stagger  between  Conflict 
Alert  and  ATAPS  would  also  be  improved. 

The  broken  clearance  scenario  is  now  analyzed  to 
determine  where  additional  lead  time  might  be 
provided.  Figure  F-2-3  provides  information  on 
the  altitude  relationships  involved  in  the  problem 
of  clearance  violations.  Suppose  the  assigned 
altitude  is  7.K.  Suppose  further  that  an  aircraft 
descending  at  rate  DP  follows  this  clearance  at  a 
level-off  acceleration  of  1/8g.  DIO  is  the 
distance  traversed  during  level-off.  Thus,  the 
aircraft  starts  its  level-off  DIO  feet  before  its 
assigned  altitude.  Because  of  correspondence 
error,  the  trajectory  is  CE  fee+  from  the 
indicated  altitude  trajectory.  Since  CE  is  no 
more  than  200  feet,  the  reported  altitude 
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trajectory  of  level-off  is  always  contained  within 
the  two  trajectories  shown  in  Figure  F-2-3, 
bounded  by  CE  =  *200  and  -200.  Thus,  all  aircraft 
that  intend  to  level-off  with  a  constant  1/8g 
acceleration  start  their  level-offs  between  (and 
including)  points  0  and  L.  The  exact  starting 
point  is  dependent  upon  the  correspondence  error 
of  each  aircraft.  If  an  aircraft  does  not  start 
its  level-off  prior  to  some  point  P  (before  1) , 
the  alert  logic  oust  still  allow  for  the 
possibility  +hat  its  correspondence  error  way  be 
such  ♦■hat  it  may  start  its  level-off  later.  Thus, 
no  system  can  make  a  decision  about  an  aircraft 
breaking  its  clearance  until  after  point  L. 

If  an  aircraft  doesn’t  show  indications  of 
leveling-off,  at  a  point  below  71  as  determined  by 
any  particular  scheme,  then  the  alert  logic  may 
declare  that  it  has  broken  i+s  clearance. 

Conflict  Alert  waits  for  the  aircraft  to  reach  300 
feet  below  ZA  (point  CAB)  to  make  this  decision. 
This  waiting  distance  from  point  1  to  point  CAB 
and  the  time  taken  to  traverse  it  is  a  function  of 
the  descent  rate.  Table  F-2-2  tabulates  this 
waiting  time  for  different  descent  rates.  It  is 
seen  to  be  about  eight  seconds,  regardless  of  the 
descent  rate. 

The  delay  due  to  scan  time  is  above  and  beyond 
♦his  waiting  time.  As  already  discussed,  the  scan 
time  delay  can  be  up  to  12  seconds.  Any  scheme 
that  tries  to  improve  upon  Conflict  Alert  in  its 
function  of  issuing  a  warning  when  a  clearance  is 
broken  aims  at  shrinking  these  two  delays.  The 
improvements  that  might  have  an  impact  in  reducing 
the  delays  are  now  considered. 

It  has  already  been  shown  that  correspondence 
errors  of  up  to  200  feet  in  magnitude  can  be  found 
on  aircraft  at  en  route  altitudes.  Therefore,  an 
aircraft  following  its  clearance  can  report  an 
altitude  of  up  to  200  feet  past  the  cleared 
altitude  even  when  following  its  clearance.  Thus, 
a  sufficient  condition  for  declaring  a  violation 
is  to  find  the  aircraft  a*  an  altitude  more  than 
200  feet  past  the  cleared  altitude.  This  is  the 
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current  Conflict  Alert  logic.  Such  a  scheae 
effectively  waits  for  a  fall  level-off  to  take 
place  before  making  any  decisions.  However,  one 
could  monitor  the  trajectory  and/or  the  aircraft 
ver+ical  speed  to  see  if  the  aircraft  is  in  the 
process  of  leveling  off.  Three  ways  of  doing  this 
are  considered: 

a.  Monitor  reported  altitudes  to  obtain 
indications  of  reduced  vertical  rates. 

b.  Peduce  the  quantization  level  of  reported 
altitudes  and  monitor  reported  altitudes  to 
obtain  an  indication  of  reduced  vertical 
rates. 

c.  Downlink  aircraft  vertical  speed  obtained 
from  aircraft's  own  instruments  to  yield 
indications  of  reduced  vertical  rate. 

For  each  method,  the  analysis  establishes  how 
Guickly  a  reliable  indication  of  a  level-off  can 
be  made  and  estimates  to  what  extent  the  current 
eight  seconds  waiting  time  can  be  reduced.  The 
effect  of  reducing  the  additional  delay  due  to 
scan  +ime  by  increasing  the  data  rate  is  also 
evaluated. 

P-2.2 _ Data  ”ate  Improvements 

It  was  shown  in  Section  F-2.1  that  the  radar  scan 
time,  SCANT,  adds  an  inherent  random  delay  in  the 
detection  of  an  event  and  that  this  delay  is 
uniformly  distributed  between  zero  and  SCANT 
seconds.  In  other  words,  if  an  event  occurs 
nominally  at  T  seconds,  the  actual  time  of 
detection  by  the  radar  will  be  anywhere  between  T 
and  (T  ♦  SC APT)  seconds. 

If  the  en  route  radar  were  upgraded  to  provide  a 
back-to-back  antenna  capability,  then,  for  a  12 
second  data  rate  radar,  the  effective  scan  time 
would  be  six  seconds.  The  delay  due  to  scan  tine 
would  then  be  uniformly  distributed  between  zero 
and  six  seconds.  For  a  four-second  scan  tine 
radar,  the  delay  would  be  distributed  over  zero  to 
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Table  F-2-3  shows,  for  Conflict  Alert,  the  lead 
tines  to  coaltitude  at  the  tine  a  broken  clearance 
is  detected  if  a  four  second  scan  were  being  used, 
'f’able  P-2-3  is  essentially  similar  to  Table  P-2-1, 
except  that  the  lower  bounds  in  Table  P-2-3  are 
eight  seconds  higher  than  those  in  Table  P-2-1. 
This  improvement  in  Table  P-2-3  eliminates  those 
cases  in  Table  F-2-1  where  the  detection  tines 
were  negative.  The  average  improvement  obtained 
is  four  seconds.  The  average  improvement  realized 
by  a  back-to-back  antenna  would  be  three  seconds. 

F- 2 i.3 _ Detection  of  Level-Off  by  Downlinking 

Vertical  Speed 

One  obvious  way  of  detecting  a  reduction  in  an 
aircraft’s  vertical  speed  is  to  monitor  the 
vertical  speed  obtained  from  the  aircraft's  own 
instruments.  If  a  data  link  capability  were 
available  (as  it  would  be  in  DABS) ,  then  the 
vertical  speed  obtained  from  an  appropriate 
airborne  instrument  could  be  downlinked  to  the 
ground  and  monitored  automatically  by  the 
separation  assurance  system. 

A  commonly  used  vertical  speed  instrument  on 
aircraft  is  the  rate  of  climb  indicator.  This 
instrument  has  an  inherent  delay  in  responding  to 
changes  in  vertical  speed  of  up  to  15  seconds  (see 
Reference  5).  In  Section  P-2.1  it  was  observed 
that  the  total  delay  that  could  possibly  be 
eliminated  is  itself  only  eight  seconds. 

Therefore,  the  rate  of  climb  indicator  seems 
inappropriate  as  a  source  for  downlinking  vertical 
speed  information. 

Instruments  do  exist  which  provide  a  so-called 
"instantaneous  vertical  speed".  These  instruments 
are  an  improvement  on  the  rate  of  climb 
instruments  in  that  thev  make  use  of 
accelerometers  to  augment  *he  conventional 
detection  of  static  pressure  changes  by  a 
detection  of  the  inertial  acceleration.  The 
transfer  function  of  one  such  instrument  has  been 
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analyzed.  The  transfer  function  represents  the 
response  of  vertical  speed  instruaents  and 
transducers  which  are  proprietary  products  of 
Teledyne  Avionics  of  Charlottesville,  Virginia. 
This  analysis  has  shown  that  such  an  instrument  is 
capable  of  indicating  a  500  FPH  change  in  four 
seconds  when  the  vertical  speed  is  changing  at  an 
acceleration  of  1/8g.  (The  actual  speed  change  in 
four  seconds  is  1000  PPM.)  If  the  acceleration 
were  1/4g,  it  would  show  a  500  FPH  change  in  two 
seconds.  It  is  clear,  that  the  "ins+an+aneous 
vertical  speed"  is  not  really  achieved 
"instantaneously".  However,  it  does  provide  a 
faster  response  than  the  conventional  rate  of 
climb  indicators  in  the  early  part  of  *he  speed 
charoe.  This  is  a  meaningful  improvement  for  the 
current  purposes  since  the  interest  is  in 
obtaining  an  indication  that  the  aircraft  is 
leveling  off. 

Suppose  a  perceived  change  of  500  FPH  in  the 
direction  of  level-off  is  sufficient  indication  of 
leveling  off.  An  algorithm  is  now  described  to 
declare  clearance  violations  when  vertical  speed 
is  downlinked  using  DABS. 

Figure  F-2-4  shows  the  geometry  of  a  clearance 
being  followed  and  a  clearance  being  broken.  This 
figure  is  esentially  similar  to  Figure  F-2-3.  A 
descending  aircraft  that  levels  off  may  follow  a 
trajectory  anywhere  between  the  two  trajectories 
marked  by  correspondence  errors  of  t200  and  -200 
fee*.  Thus,  depending  upon  the  value  of  +he 
correspondence  error,  the  aircraft  could  start 
leveling  off  at  an  altitude  as  high  as  70.  With 
the  rate  of  descent  available  on  the  downlink  from 
scan  to  scan,  and  assuming  that  the  descent  rate 
remains  constant,  it  is  possible  to  estimate  the 
time  of  arrival  at  ZO.  Let  ^H  be  the  last  scan 
time  before  the  estimated  time  at  ZD  and  let  DP  be 
the  best  estimate  of  the  descent  rate  at  that  scan 
time.  Depending  upon  the  value  of  correspondence 
error,  the  aircraft  may  start  leveling  off  at  an 
altitude  as  low  as  ZL.  Pven  if  it  starts  its 
level-off  at  ZL,  it  won't  be  until  four  seconds 
later  at  point  D  that  its  vertical  speed 
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instrument  mill  reflect  a  change  of  500  FPH.  If 
at  this  time  the  vertical  speed  does  not  shorn  a 
reduction  by  500  FPH,  it  is  certain  that  the 
aircraft  is  not  intending  a  level-off  (at  least 
not  with  an  acceleration  less  than  that  which 
produces  a  level-off  distance  of  DLO) .  Thus, 
point  0  is  the  earliest  possible  decision  point 
for  declaring  a  broken  clearance.  Because  of  the 
sample  tine  involved,  the  ground  system  can  only 
acquire  ♦he  vertical  speed  of  the  aircraft  at 
point  N ,  the  nex+  scan  time  after  D.  Thus,  if  at 
scan  time  TN  the  vertical  speed  downlinked  by  the 
aircraft  does  not  show  at  least  a  500  FPH 
reduction  in  DP  from  the  value  observed  at  point 
H,  then  the  clearance  is  being  broken.  Figure 
F-2-4  presents  results  using  this  logic  as  an 
addition  to  the  current  Conflict  Alert  logic. 

CAB  is  the  point  at  which  the  current  Conflict 
Alert  would  declare  that  the  clearance  was  broken. 
With  the  scheme  described  here  this  same 
declaration  takes  place  at  point  D.  The  average 
gain  in  aler*  time  with  the  new  scheme  is  the  time 
ot  traverse  between  D  and  CAB.  This  gain  is 
actually  realized  in  multiples  of  the  scan  tine. 
Thus,  if  th  were  *he  first  scan  time  after  point  D 
and  TN  occurred  after  CAB,  then  either  scheme 
would  declare  +  he  clearance  to  be  broken  at  TP  and 
no  gain  is  realized  by  the  new  scheme.  If 
however,  TN  occurs  before  point  CAB  and  the  next 
scan  time  occurs  after  CAB  then  a  gain  of  one  scan 
time  would  be  realized.  On  the  average,  since  TN 
can  occur  anywhere  between  D  and  CAB  (and  beyond) 
with  equal  probability,  the  gain  with  the  current 
scheme  is  equal  to  the  time  of  traverse  between  D 
and  CAB.  The  exact  value  of  scan  time  does  not 
affect  this  average.  If  would,  however,  affect 
the  range  of  alert  time  gains.  The  altitude  of 
point  d  changes  with  the  descent  rate  and  so  does 
the  time  of  traverse  between  D  and  CAB.  Table 
F-2-4  tabulates  the  time  of  traverse  between  D  and 
CAB  for  different  descent  rates.  Note  that  about 
four  seconds  of  gain  is  realized  over  the  current 
Conflict  Alert. 

table  F— 2-5  shows  the  lead  times  to  coaltitude  in 
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NOTE:  Average  Gain  -  Time  of  Traverse  Between  Points  D  and  CAB  in  Figure  F-2- 


Conflict  Alert  when  broken  clearances  are  declared 
with  this  improvement.  This  table  should  be 
compared  to  Table  F-2-3  and  Table  F-2-1.  When 
sufficient  alert  time  already  exists,  the  extra 
improvement  added  by  this  method  is  of  no 
particular  value.  However,  in  the  region  of  low 
alert  times  these  few  extra  seconds  will  imply 
slightly  more  protection.  In  the  medium  range  of 
alert  times,  this  gain  would  sonewhat  improve  the 
staggering  in  alert  times  between  Conflict  Alert 
and  ATAHS  if  they  were  in  operation 
simultaneously. 

F- 2 . 4 _ Detection  of  Level-off  Through  Honitorino 

of  Feported  Altitude 

Changes  in  an  aircraft's  vertical  speed  can  be 
deduced  from  the  aircraf+'s  altitude  profile.  The 
next  two  sections  present  the  theoretical  basis 
for  and  algorithmic  implementation  of  this 
possibility.  Section  F-2.4.1  discusses  the 
results  when  altitude  is  reported  in  hundred  feet 
quantization  levels  and  Section  F-2.4.2  discusses 
the  results  when  altitude  reporting  with  little  or 
no  quantization  may  be  available. 

F-2.4.1 _ Hundred  Feet  Quantizations 

Figure  F-2-5  shows  the  true  trajectory  of  an 
aircraft  initially  descending  at  rate  DF  that 
levels  off  at  acceleration  f  =  1/8g.  The  dotted 
line  shows  the  path  of  the  aircraft  if  it  were  to 
maintain  its  vertical  speed.  Let  DZ  be  the 
altitude  difference  between  the  constant  rate 
descent  path  and  the  leveling  off  trajectory  at 
any  given  point  during  the  level-off,  and  let  (DF- 
DV)  be  the  vertical  speed  of  the  aircraft  at  the 
same  point.  DV  is  thus  the  amount  of  reduction  in 
the  aircraft's  vertical  speed  since  the  level-off 
began. 

Then 


DZ  =  (DV  *  DV)  /  (2  *  f). 

Given  f,  there  is  a  unique  correspondence  between 
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DR  -  INITIAL  DESCENT  RATE 
f  *=  LEVEL-OFF  ACCELERATION 


FIGURE  F-2-5 

CORRESPONDENCE  BETWEEN  ALTITUDE  AND  SPEED  DIFFERENTIALS 
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D7  and  the  amount  of  deceleration  DV.  DZ  is 
called  the  "altitude  differential". 

Tn  ♦he  current  (ATCRBS)  system,  altitude  is 
reported  in  hundred  feet  quantizations.  Thus, 
while  the  true  level-off  tralectory  nay  be 
accruing  a  continuously  increasing  value  of  D7, 
the  reported  values  of  altitude  are  only  changing 
in  hundred  feet  levels.  Let  DZF  designate  the 
altitude  differential  in  reported  altitude.  Given 
certain  quantization  boundary  conditions,  a 
situation  may  exist  where  DZ  may  be  say,  99  feet 
but  D7R  may  be  zero.  Conversely,  DZ  may  be  very 
small,  say  one  foot,  and  D2R  may  lump  to  the  nev* 
quantization  level,  showing  a  one  hundred  foot 
altitude  differential.  Only  if  DZF  =  200  feet 
could  one  be  sure  that  D?  were  at  least  100  feet. 
Conversely,  DZ  must  accrue  to  at  least  100  feet 
before  the  aircraft  can  be  declared  to  be  leveling 
off. 

A+  1/8g  level-off  acceleration,  seven  seconds  is 
needed  to  accumulate  100  feet  for  DZ.  In  this 
time,  the  vertical  speed  would  change  by  28  feet 
per  second  or  about  1700  PPM.  (If  the  initial 
descent  rate  of  the  aircraft  were  less  than  1700 
PPM,  the  aircraft  would  already  be  level  in  seven 
seconds.  It  can  be  shown  that  a+  1000  FPM  initial 
descent  rate,  the  aircraft  would  need  eight 
seconds  to  accure  a  DZ  of  100  feet.)  In  summary, 
if  ATCRBS  altitude  reports  were  being  monitored, 
at  least  seven  seconds  (eight  seconds  at  1000  FPH 
initial  rate)  would  be  required  to  detect  a  change 
in  vertical  speed  reliablv. 

An  algorithm  is  now  formulated  which  translates 
this  idea  into  a  scheme  for  detecting  level-offs 
by  monitoring  reported  altitudes.  Figure  F-2-6 
depicts  this  algorithm.  This  figure  is 
essentially  similar  to  Figure  F-2-4  and  follows 
the  same  nomenclature. 

Let  TO  be  +he  estimated  time  at  the  altitude  above 
which  no  level-offs  would  start.  Let  DE  be  the 
best  estimate  of  the  vertical  ra+e  at  the  latest 
scan  time  TM  such  that  Tfl  is  less  than  or  equal  to 
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TO.  Such  an  estinate  would  be  obtained  by 
tracking  ♦he  reported  altitudes  with  an 
appropriate  tracker.  Depending  upon  the  value  of 
its  correspondence  error,  an  aircraft  nay  start  a 
level-off  as  late  as  point  L.  let  TL  be  the 
estimated  time  of  arrival  at  1.  At  least  seven 
more  seconds  (eight  if  DR  is  1000  FF!»)  3<ust  pass 
before  the  reported  altitude  can  be  used  to 
indicate  whether  the  aircraft  is  in  fact  leveling 
off.  Point  D  is  this  decision  point  and  the 
decision  tiae  TD  is  given  by  TD  =  TL  ♦  7.  An 
altitude  report  can  only  be  obtained  at  the  scan 
times.  Let  TN  be  the  earliest  scan  tine  such  that 
TN  is  greater  than  or  equal  to  TD.  Let  ZRN  be  the 
reported  altitude  at  point  N,  obtained  by  linearly 
protecting  ♦he  aircraft  path  at  descent  rate  DR 
from  the  altitude  at  TH.  If  7FN  <  7N  ♦  ?00  then 
the  aircraft  is  declared  to  be  not  leveling-off. 
This  check  is  added  to  the  current  Conflict  Alert 
logic  (which  declares  the  clearance  broken  if  the 
repor+ed  altitude  reaches  300  feet  below  the 
cleared  altitude)  to  comprise  the  algorithm  that 
monitors  reported  altitudes  for  level-off. 

Conflict  Alert  without  this  added  scheme  would 
declare  a  broken  clearance  at  point  CAB.  By 
arguments  similar  to  those  used  in  Section  F-2.3, 
the  average  gain  in  alert  time  using  this  latter 
scheme  is  the  time  of  traverse  between  D  and  CAB. 
Although  this  average  gain  is  independent  of  the 
magnitude  of  the  scan  time,  the  actual  gain  seen 
in  any  particular  event  is  in  multiples  of  the 
scar  time.  Table  F-2-6  provides  values  for  the 
average  gain  in  alert  time  realized  by  monitoring 
reported  altitudes.  It  is  seen  that  this  gain  is 
essentially  zero.  This  means  that  the  present 
scheme  of  detecting  broken  clearances  cannot  be 
improved  upon  by  monitoring  the  reported  altitudes 
that  arrive  in  levels  of  100  feet.  Tt  should  also 
be  pointed  out  that  this  scheme  is  equivalent  to 
detec+ina  changes  in  the  vertical  speed  using  an 
altitude  rate  obtained  by  tracking  altitude.  (The 
same  altitude  differential  would  be  required 
whether  the  decision  was  being  made  with  altitude 
differences  or  vertical  speed  differences.)  Thus, 
no  improvement  in  the  time  of  declaring  broken 
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AVERAGE  GAIN  OVER  CURRENT  CONFLICT  ALERT  AT  SAME  DATA  RATE  WHEN  REPORTED  ALTITUDE 


clearances  can  be  realized  by  tracking  the 
vertical  rate  daring  level-offs,  when  altitades 
are  available  in  levels  of  100  feet. 

F-2.4.2  Finer  Qaantization  of  altitude 

The  effect  on  the  decision  points  described  above 
if  altitude  were  available  at  nuch  finer 
quantization,  say  in  one-foot  levels,  is  now 
evaluated.  With  fine  quantization,  the  snallest 
altitude  differential  DZ  (see  Figure  F-2-3)  that 
could  indicate  a  leveling-off  would  be  a  quantity 
greater  than  the  expected  altitude  noise  or  scan 
to  scan  variation.  Suppose  the  scan  to  scan 
altitude  variation  in  nornal  flying  conditions  is 
10  feet  one-signa  and  that  any  D7  less  than  30 
feet  may  be  attributable  to  noise.  DZ  of  at  least 
30  feet  nust  be  accrued  to  believe  that  a  level- 
off  is  taking  place,  ht  1/8g  acceleration,  this 
takes  four  seconds.  Thus,  with  a  no-quantization 
systen,  the  decision  nust  be  delayed  until  four 
seconds  after  point  L  (see  Figure  F-2-6)  and  then 
the  reported  altitude  nust  be  conpared  to  the 
projected  altitude  to  see  if  the  difference  is 
greater  than  30  fegt.  If  not,  the  aircraft  would 
be  declared  to  be  breaking  its  clearance. 

The  tine  between  points  t  and  D  in  the  no¬ 
quantization  systen  is  observed  to  be  the  sane  as 
when  vertical  speed  is  being  downlinked.  Thus, 
the  benefit  gained  in  issuing  an  alert  when  a 
clearance  is  broken  is  the  sane  whether  vertical 
speed  is  downlinked  or  altitude  with  finer 
quantisation  is  available  to  the  ground. 

F-2.5  Sensitivity  to  assumptions 

This  section  briefly  discusses  the  effect  of 
various  assunptions  nade  in  this  analysis. 

P-2. 5. 1 _ Descent  Rate  Estivation 

In  every  algorithm  discussed  above,  an  implicit 
assumption  has  been  nade  regarding  the  ability  to 
estinate  the  aircraft  descent  ra+e  correctly.  In 
the  nethods  which  use  only  reported  altitudes  (and 
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not  downlinked  vertical  speed) ,  the  initial 
altitude  rate  is  obtained  through  a  tracker  and 
would  inherently  be  subject  to  tracker  errors.  Tn 
addition  to  the  scan  to  scan  variations  in 
altitude,  quantization  level  and  data  rate 
contribute  to  errors  in  descent  rate  estination  by 
trackers.  Snaller  data  intervals  and  lover 
quantization  levels  facilitate  greater  accuracy  of 
descent  rate  estination. 

Even  in  the  case  of  downlinked  vertical  speed, 
sone  snoothing  of  the  vertical  rate  would  be 
necessary.  A  snaller  data  interval  will  inprove 
this  estinate  also.  Errors  in  descent  rate 
estination  contribute  to  errors  in  estinated  tines 
of  arrival,  causing  false  alarns  or  missed 
detections. 

F-2.5.2  tevel-Off  Acceleration 

A  value  of  1/8g  has  been  used  as  the  nominal  value 
of  the  level-off  acceleration.  Tn  practice,  a 
range  of  accelerations  would  be  encountered.  Non- 
constant  accelerations  during  level-offs  are  quite 
likely.  Even  step-wise  level-offs  nay  be 
encountered,  which  could  present  sone  special 
difficulties  in  realizing  the  effectiveness  of  an 
algorithm  which  assumes  level-offs  with  constant 
acceleration.  Assuning  a  constant  acceleration, 
the  nininun  expected  acceleration  determines  the 
value  of  70  (see  Figure  F-2-3) .  Lower  values  of 
acceleration  imply  earlier  tines  at  which  the 
initial  descent  rate  nust  be  recorded.  Earlier 
tines  in  determining  DP  imply  greater  errors  in 
estinated  tines  of  arrival  and  hence  greater 
probability  of  false  alarns  or  nissed  detections. 

The  amount  of  gain  in  alert  tine  realized  by  any 
of  the  new  nethods  for  detecting  level-off  is 
dependent  upon  the  naxinun  value  of  level-off 
acceleration.  A  larger  value  of  level-off 
acceleration  implies  a  snaller  level-off  distance 
(010)  and  a  snaller  tine  to  level  off.  Thus, 
point  L  in  Figures  F-2-4  and  F-2-6  occurs  later. 
If,  on  the  other  hand,  the  naxinun  value  of  the 
level-off  acceleration  were  snaller  than  1/8g, 
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then  point  1  occurs  earlier.  The  tine  to  accrue 
the  thresholds,  (100  feet  in  the  quantized 
altitude  systea,  30  feet  in  the  unquantized 
altitude  systea  and  500  PPM  in  the  vertical  speed 
systea)  are  also  lonqer.  It  can  be  shown  that  if 
the  aaxiaua  expected  level-off  acceleration  is 
1/16g,  then  the  average  gain  over  the  current 
Conflict  Alert  loqic  will  be  about  six  seconds  for 
the  downlinked  vertical  speed  systea,  eight 
seconds  for  the  non-quantized  altitude  systea  and 
about  four  seconds  for  the  quantized-altitude 
systea.  These  values  are  two  to  four  seconds 
higher  than  those  at  1/8g  level-off  acceleration. 

F-2. 5. 3 _ scan  to  Scan  Altitude  Variations 

Section  F-2. 4. 2  assuaes  a  value  of  10  feet  one- 
sigaa  for  ♦he  randoa  variation  in  the  reported 
(unquantized)  altitude  in  a  noraal  flying 
environment.  This  is  Bade  up  of  randoa  variations 
in  the  s+etic  port  pressure  and  randoa  variations 
in  al*i*ude  due  to  pilotage. 

If  +his  value  of  scan  to  scan  variation  were  five 
fee'*-  one-sigaa,  the  benefit  froa  a  no-quantization 
svs*em  would  increase  by  about  one  second.  If  it 
were  20  feet  one  sigaa,  then  the  benefit  would 
decrease  by  1.5  seconds. 

F-2.6  Implications  for  ATARS 

’’’he  availability  of  either  finer  altitude 
quantization  or  vertical  speed  would  also  iaprove 
detection  of  vertical  maneuvers  in  ATARS.  It  has 
already  been  shown  that  in  the  100  feet 
quantizaton  systea,  a  vertical  aaneuver  can  be 
detected  in  seven  seconds.  For  either  a  non¬ 
quantization  altitude  system  or  a  downlinked 
vertical  speed  system,  four  seconds  are  required. 
Thus,  a  gain  of  three  seconds  in  any  situation 
that  requires  reliable  detection  of  a  vertical 
aaneuver  can  be  achieved.  This  assuaes  an 
acceleration  value  of  1/8g.  If  these  iaproveaents 
were  available  in  ATARS,  about  three  seconds  would 
be  gained  in  situations  involving  vertical 
aaneuvers.  ATARS  does  not  currently  have  a  level- 
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off  detection  logic.  Farther  study  voald  be 
required  to  develop  sach  a  logic  and  to  estimate 
hov  nuch  benefit  these  extra  few  seconds  voald 
inply  for  ATABS. 

F-2.T  Implications  for  the  Data  Link 

Providing  the  vertical  speed  of  aircraft  to  the 
ground  inplies  use  of  a  downlink  capability.  If 
the  downlink  were  to  be  useful  for  detecting 
level-offs  or  broken  altitude  clearances,  the  data 
would  have  to  be  downlinked  every  scan.  This 
would  aean  that  aircraft  would  routinely  have  to 
make  112  bit  downlink  replies  rather  than  the  56 
bit  replies  currently  required  by  the  DABS  systen. 
’’’here  are  not  enough  bits  available  to  downlink 
vertical  speed  in  the  56  bit  nessages.  Providing 
altitude  with  finer  quantization  would  also 
require  downlink  capability,  since  the  altitude 
would  aost  likely  be  provided  in  a  separate  data 
block  supplementing  the  routine  altitude 
information  which  is  quantized  to  100  foot  levels. 
Both  would  require  about  the  sane  number  of  bits 
to  provide  reasonable  resolution.  Thus,  the  data 
link  requirements  of  providing  vertical  speed  and 
finer  altitude  are  comparable. 
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P-3.  SOHH ART  AWD  CO WC10 SIOWS 

The  current  ATCRBS  systea  provides  altitude 
reports  quantized  in  hundreds  of  feet.  The 
proposed  DABS  systea  also  provides  this  saae 
quantization  for  reported  altitude.  Soae 
iaproveaent  in  the  ability  of  a  separation 
assurance  systea  eleaent  to  protect  against  broken 
altitude  clearances  can  be  realized  by  providing 
finer  altitude  quantization  or  providing  the 
vertical  speed  of  the  aircraft  to  the  ground 
systea.  With  either  of  these  improvements,  En 
Route  Conflict  Alert  could  provide  about  four 
seconds  of  earlier  warning  in  cases  of  violation 
of  altitude  clearances.  If  the  en  route  systea 
were  to  use  a  four  second  scan  period  instead  of  a 
12  second  scan  period,  an  average  of  four  seconds 
earlier  warning  in  cases  of  broken  clearances 
could  be  provided.  The  iaproveaent  from  increased 
da+a  rate  is  independent  of,  and  additive  to,  the 
iaproveaent  gained  froa  eliminating  altitude 
quantization  or  providing  vertical  speed.  Thus,  a 
total  of  eight  seconds  extra  warning  tiae  could  be 
gained  in  the  current  Conflict  Alert  in  cases 
involving  broken  altitude  clearances.  Where  the 
current  Conflict  Alert  provides  sufficient  warning 
against  impending  conflicts  resulting  froa  broken 
clearances,  this  additional  tiae  of  eight  seconds 
aakes  no  extra  contribution  to  safety.  Where  the 
current  Conflict  Alert  provides  low  warning  tiaes 
in  such  conflicts,  these  eight  seconds  can  Bake  a 
marginal  contribution  to  providing  adequate 
protection. 

Ro  iaproveaent  can  be  realized  in  Conflict  Alert's 
ability  to  protect  against  broken  clearances 
simply  by  adding  a  software  feature  that  aoni+ors 
altitude  reports  if  the  current  100  feet 
quantization  is  retained. 

Providing  altitude  with  finer  quantization  or 
downlinking  vertical  speed  are  nearly  equivalent, 
both  in  terns  of  the  gain  in  alert  tiae  and  in 
terns  of  the  deaands  they  would  place  on  the  data 
link. 
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APPENDIX  G 


DABS/ATARS  MULTI-SITE  DESIGN 


G-1.  IMTBODOCTION 


The  existing  aulti-site  design  for  the  Discrete 
Address  Beacon  System  (DABS)  and  the  Autoaated 
Traffic  Advisory  and  Resolution  Service  (ATARS) 
uses  autoaatic  coordination  between  adjacent  sites 
in  order  to  provide  consistent  and  continuous 
surveillance  and  collision  avoidance  service  at 
the  boundaries  between  sites.  Direct  site-to-site 
ground  coaaunications  between  all  sites  which 
share  a  conaon  boundary  are  used  to  effect  this 
coordination.  The  features  of  the  DABS/ATARS 
multi-site  design  which  nake  use  of  this  site-to- 
site  coaaunications  channel  are: 

a)  Surveillance  Handoff.  A  DABS  aircraft 
entering  the  coverage  area  of  one  sensor  can 
be  acquired  by  that  sensor  in  a  positive  way 
with  the  aid  of  data  provided  by  another 
sensor. 

bl  Primary  sensor  Assjgnaent.  The  sensors 
coordinate  so  that  one  and  only  one  sensor  at 
a  time  will  be  designated  as  the  prinary 
sensor  for  each  DABS  aircraft.  Certain 
surveillance  and  data  link  functions  are 
performed  only  by  the  prinary  sensor. 

cl  Remote  Surveillance.  One  sensor  can 
receive  target  report  data  fron  a  neighboring 
sensor  on  a  temporary  basis  for  a  particular 
aircraft  which  has  experienced  fading  due  to 
antenna  shielding,  or  which  has  entered  the 
cone  of  silence  of  a  DABS  sensor. 

dl  ATARS  Sean  Conflict  Coordination. 

Messages  are  exchanged  which  provide  for 
consistent  resolution  of  conflicts  in  the 
areas  (called  seam  areas)  near  the  boundaries 
between  sites. 

Backup  for  Failed  Sensor.  A  sensor  uses 
the  communications  channels  to  recognize  the 
failure  of  a  neighboring  sensor  and  to 
coordinate  with  the  failed  sensor  or  other 
sensors  when  initiating  or  terminating  backup 
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service. 

f )  Hulti-site  Uplink.  IT APS  or  any  other 
data  link  user  has  the  option  to  designate  a 
particular  nessage  as  a  nessage  for  nulti- 
site  uplink.  Hhen  this  option  is  exercised, 
the  DABS  sensor  will  transmit  the  uplink 
nessage  to  all  other  sensors  naintaining 
contact  with  the  subject  aircraft  and  all 
sensors  will  attenpt  to  deliver  the  nessage. 

A  recent  study,  docunented  in  Deference  1, 
investigated  various  network  architectures, 
transnission  nethods,  and  overall  connunications 
costs  for  DABS/ATABS  nulti-site  coordination. 

That  study  showed  that  the  current  ATARS  nulti- 
site  design  places  high  reguirenents  on  the 
capacity  of  the  site-to-site  connunications 
channel  by  requiring  that  ATARS  conflict 
infornation  be  passed  fron  one  site  to  another  in 
0.3  seconds.  The  study  suggested  that  significant 
cost  savings  could  be  achieved  if  the  delivery 
tine  requirenents  could  be  relaxed  fron  0.3 
seconds  to  2.0  seconds.  Such  relief  could  be 
realized  by  reorganizing  the  high  level  ATARS 
processing. 

The  present  ATARS  logic  operates  on  what  nay  be 
called  an  epoch  basis.  At  the  beginning  of  an 
ATARS  epoch  cycle,  the  positions  of  all  aircraft 
are  adjusted  to  a  connon  point  in  tine  (called  the 
epoch  tine)  based  upon  the  tracked  infornation 
resulting  fron  the  latest  available  target  reports 
and  upon  the  tine  of  those  reports.  ATARS  then 
searches  through  all  aircraft  in  the  data  base  for 
conflict  pairs.  When  pairs  are  found,  they  are 
resolved  on  a  pairwise  basis.  After  the  search  is 
conpleted  for  all  aircraft  in  the  data  base,  ATARS 
nessages  are  generated  for  uplink.  The  ATARS 
cycle  is  repeated  every  two  seconds.  In  this 
schene,  the  tining  for  ATARS  processing  is  not 
driven  by  the  scanning  of  the  DABS  sensor's 
antenna. 

An  alternative  approach  is  to  have  ATARS 
processing  operate  on  a  fraction  of  the  aircraft 


at  a  tiie.  This  is  a  sector  approach  that  works 
on  all  aircraft  within  one  aziinth  wedge  or 
sector.  After  the  sensor  has  delivered  reports 
for  all  aircraft  in  a  sector,  ATARS  tracks  all 
aircraft  in  that  sector.  After  a  few  sectors  of 
delay  to  allow  aircraft  in  surrounding  sectors  to 
be  tracked  also,  ATARS  searches  for  all  conflicts 
involving  aircraft  in  the  subject  sector 
(including  conflicts  between  these  aircraft  and 
aircraft  in  neighboring  sectors).  ATARS  then 
generates  nessages  for  all  aircraft  in  that  sector 
in  tine  for  the  aessages  to  be  delivered  when  the 
antenna  next  points  to  those  aircraft.  During  the 
period  of  tiae  eguivalent  to  the  scanning  of  one 
sector,  ATARS  perforas  different  functions  for 
aircraft  in  several  different  sectors.  Any  one 
aircraft  receives  ATARS  processing  with  a  cycle 
tiae  egual  to  the  scan  tiae  of  the  DABS  sensor. 

The  study  in  Reference  1  also  showed  that  traffic 
levels  in  soae  areas  would  not  seen  to  justify  the 
expense  of  installing  and  leasing  dedicated 
coaaunications  lines  between  soae  pairs  of  sites. 
It  was  suggested  that  a  aethod  of  coordination 
between  sites,  using  the  storage  and  transmission 
of  limited  items  of  information  by  the 
transponder,  be  developed  and  evaluated.  This 
approach  could  make  it  possible  to  avoid  the  use 
of  ground  coaaunications  channels  in  low  traffic 
areas.  It  could  also  provide  a  backup 
communications  method,  that  would  eliminate  the 
reguireaent  to  provide  clstly  alternate  path 
coaaunications  for  reliability. 

The  current  study  investigated  the  feasibility  of 
reorganizing  ATARS  processing  from  an  epoch  basis 
to  a  sector  basis  and  of  developing  a  through-the- 
transponder  aethod  of  site-to-site  coordination. 
The  study  produced  a  feasibility  aodel  of  a  design 
for  such  a  system  and  an  indication  of  the  impacts 
of  iapleaenting  it  on  current  designs  and 
development  programs.  This  appendix  summarizes 
these  results. 

In  this  study  to  date,  no  atteapt  has  been  wade  to 
consider  the  software  engineering  details  of 
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sec tor- oriented  processing  at  a  site.  Fron  the 
viewpoint  of  nulti-site  coordination,  the  only  tvo 
important  effects  of  sector  processing  are  that 
coordination  actions  nay  occur  at  randon  tines, 
and  that  nore  tine  is  available  for  site-to-site 
nessage  transfer.  The  investigation  was  therefore 
confined  to  the  logical  problens  of  coordination 
anong  a  set  of  sites. 


A  key  feature  of  the  aulti-site  design  concept 
developed  in  this  study  is  that  each  site  in  the 
network  is  pernanently  assigned  a  four  bit  ID  froa 
the  set  (1000,  0100,  0010,  0001).  A  priority 
order  is  defined  over  this  set,  such  that  site 
1000  has  priority  over  site  0100,  which  has 
priority  over  site  0010,  etc.  In  a  pair  of  sites, 
the  site  of  higher  priority  is  said  to  be 
"dominant",  the  other  site  being  "subordinate". 
Each  site  uplinks  its  ID  every  scan  to  every 
aircraft  receiving  ATARS  protection  froa  it.  The 
transponder  sets  the  corresponding  bit  in  a  site 
ID  field,  whose  contents  are  downlinked  to  all 
sites  in  response  to  any  interrogation.  This  site 
ID  field  is  a  part  of  the  Conflict  Indicator 
Register  (CIR)  used  for  interfacing  ATARS  and  the 
Beacon  Collision  Avoidance  Systea  (BCAS) . 

(Appendix  C  presents  the  ATARS-ECAS  interface.  It 
presents  details  of  how  the  site  ID  is  uplinked 
and  how  the  site  ID  field  is  downlinked  by  the 
transponder.)  The  site  ID  field  is  cumulative  so 
that  it  shows  the  ID*s  of  all  sites  currently 
providing  ATARS  service  to  that  aircraft  by  a  1  in 
the  appropriate  bit  position. 

The  use  of  four  site  ID's  does  not  appear  to  be 
restrictive.  There  is  no  known  reason  at  this 
time  why  nore  than  four  sites  should  be  providing 
ATARS  service  in  a  given  airspace.  An  individual 
site  nay  use  aore  than  one  site  ID.  If  it  does, 
it  will  break  up  its  total  service  area  into  a 
saall  number  of  subareas  in  which  it  will  use  a 
single  ID.  The  use  of  site  ID*s  will  be 
coordinated  between  adjacent  sites  so  that  no 
aabiguity  about  which  site  is  using  which  ID  will 
exist  at  any  particular  point. 

A  service  zone  boundary  between  a  pair  of  sites  is 
controlled  by  the  doainant  site  of  the  pair;  the 
subordinate  site  is  not  aware  of  this  boundary. 

An  exaaple  of  a  set  of  service  zone  boundary 
definitions  is  presented  in  Figure  G-2-1.  In  this 


figure  and  others  to  follow,  the  Unit  of  DABS 
surveillance  is  indicated  by  a  circle.  This 
boundary  can  actually  have  any  shape.  The  sane  is 
true  for  the  boundaries  defining  the  lieit  of 
ATABS  service. 

An  individual  site  uplinks  its  site  ID  to  an 
aircraft  each  scan  for  as  long  as  that  aircraft  is 
within  its  service  zone.  It  resets  its  ID  when  it 
observes  the  aircraft  leave  the  service  zone 
across  the  service  zone  boundary.  (Aircraft 
leaving  a  site's  service  zone  across  a  DABS 
coverage  floor  will  have  that  site's  ID  reset  by  a 
timeout  clock  in  the  transponder.)  The  dominant 
site  also  sends  messages  about  these  set/reset 
actions,  before  the  actual  uplink,  to  other  sites 
in  the  network  if  those  sites  are  connected 
through  ground  channels.  The  set/reset  rule  is 
suspended  if  the  transition  occurs  during  a 
conflict  in  which  advisories  have  already  been 
received  by  the  aircraft,  making  this  a  "soft" 
boundary.  The  contents  of  each  aircraft's  site  ID 
field  are  routinely  recorded  in  that  aircraft's 
track  file  by  each  ATABS  site,  so  that 
responsibility  information  is  available 
immediately  if  a  conflict  is  detected. 

Another  key  feature  of  the  concept  is  that  when  a 
conflict  occurs  between  a  pair  of  aircraft,  the 
highest  priority  site  whose  ID  is  in  the  site  ID 
fields  of  both  aircraft  resolves  the  conflict. 

(The  coordination  logic  described  in  this  appendix 
is  used  to  coordinate  only  resolution  advisories. 
Traffic  advisories  are  not  coordinated.)  Lower 
priority  sites  recognizing  the  conflict  refrain 
from  uplinking  resolution  advisories.  For 
example,  suppose  the  site  ID  registers  of  a 
conflicting  pair  of  aircraft  contain  the  data 
(0110)  and  (0111).  then  site  4  (0100)  detects  the 
conflict,  its  answer  to  the  rhetorical  question, 
"Which  site  has  the  highest  priority  site  ID  in 
both  aircraft?"  is,  "own  site".  Site  4  then 
computes  and  uplinks  resolution  advisories  for 
both  aircraft.  Site  2's  answer  to  that  sane 
guestion  is,  "other  site",  and  site  2  surrenders 
responsibility  to  the  dominant  site  by  not 
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uplinking  advisories.  Site  1  would  not  detect  the 
conflict  since  it  is  not  providing  service  to  both 
aircraft.  In  this  way,  pairwise  site 
responsibility  designation  is  usually  in  steady 
state  at  the  tine  a  conflict  naterialixes;  nulti- 
site  coordination  at  that  stage  is  perforned  only 
to  assure  coapatibility  of  coaaands  in  nulti- 
aircraft  encounters. 

Another  key  feature  of  the  design  concept  is  that 
responsibility  for  separating  aircraft  is 
designated  on  a  pairwise  (pair  of  aircraft)  basis. 
Thus,  a  particular  aircraft  nay  receive  an 
advisory  fron  one  site  for  avoiding  a  first 
threat,  and  siaultaneously  receive  an  advisory 
fron  a  different  site  for  avoiding  another  threat. 
Although  advisories  for  separating  a  pair  of 
aircraft  nay  be  uplinked  to  those  aircraft  by 
several  sites  (as  discussed  in  the  sequel),  the 
single  site  responsible  for  that  pair  will  choose 
the  advisories.  Sites  are  inforned  of  each 
other's  advisories  through  coordination  nessages 
received  over  ground  lines,  and  through  downlink 
of  the  CIR.  These  features  are  explained  later  in 
this  section. 

G-2.2  Examples  of  Site  Responsibility  Designation 

Gxanples  of  site  responsibility  designation  for 
two  aircraft  conflicts  are  presented  in  Figure 
G-2-2.  In  this  figure,  showing  a  three-site 
network,  the  positions  of  conflicting  aircraft  are 
indicated  by  the  synbol  nX".  The  contents  of  each 
aircraft's  site  ID  field  at  the  tine  the  conflict 
naterializes  are  shown  next  to  the  position 
synbol.  These  contents  can  be  deduced  fron  the 
plan  view  geography.  (Coverage  floor 
considerations  are  excluded  at  this  point.)  The 
circles  represent  DABS  coverage  Units,  and  the 
dashed  lines  between  each  pair  of  sites  represent 
ATARS  service  zone  boundaries.  The  site  that  will 
take  responsibility  for  each  conflict  pair  is 
indicated  on  the  figure. 

An  interesting  exanple  of  a  two-site  three- 
aircraft  conflict  is  presented  in  Figure  G-2-3. 
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FIGURE  G-2-2 

EXAMPLES  SHOWING  SITE  RESPONSIBILITY  DESIGNATION 
FOR  TWO-AIRCRAFT  CONFLICTS 


FIGURE  G-2-3 

THREE-AIRCRAFT  CONFLICT  SCENARIO  EXAMPLE 


The  conflict  between  aircraft  1  and  aircraft  B  is 
resolved  by  site  1,  and  the  conflict  between 
aircraft  B  and  aircraft  C  by  site  2,  according  to 
the  responsibility  protocol  defined  above.  Since 
aircraft  B  will  receive  an  advisory  fron  site  1 
for  avoiding  aircraft  A,  and  also  an  advisory  fron 
site  2  for  avoiding  aircraft  C,  the  necessity  for 
intersite  coordination  to  cause  these  advisories 
to  be  conpatible  is  apparent. 

One  final  exanple  is  presented  in  Figure  G-2-4, 
which  depicts  a  two-site  four-aircraft  conflict. 
Hhen  aircraft  k  conflicts  with  aircraft  B,  site  4 
uplinks  advisories  to  separate  then.  Then  the 
conflict  between  aircraft  C  and  aircraft  0 
appears,  which  is  nanaged  by  site  2.  The  i-B  and 
C-D  pairs  would  then  be  si nultaneously  receiving 
resolution  advisories  fron  site  4  and  site  2, 
respectively.  If  aircraft  B  then  conflicts  with 
aircraft  C,  site  2  receives  unambiguous 
responsibility  for  this  pair.  k  conpatible 
resolution  can  be  developed  by  site  2,  provided 
that  it  can  be  nade  aware  of  the  results  of  site 
4*s  resolution  for  the  C-D  pair. 

G-2.3  Description  of  the  Logic 

The  nulti-site  connunication  schene  is  now 
addressed,  k  network  of  DABS/ATABS  sensors  fully 
connected  by  ground  lines  is  considered. 

Events  related  to  a  single  conflict  that  occur 
during  one  sensor  scan  are  depicted  in  Figure 
G- 2-5.  Tine  proceeds  fron  left  to  right,  and 
narks  on  the  tine  line  represent  instants  at  which 
events  occur.  The  left-nost  event  is  an 
interrogation  of  the  first  aircraft  in  the 
conflict  by  this  site,  and  the  right-nost  event  is 
the  next  interrogation  of  that  aircraft  by  this 
site.  These  endpoints  therefore  define  a  one-scan 
interval. 

It  is  characteristic  of  the  prototype  DABS  sensor 
hardware  that  ATABS  nay  receive  surveillance  data 
as  late  as  3/32  scan  after  an  aircraft  is  actually 
interrogated.  Another  characteristic  is  that 


FIGURE  G-2-4 

FOUR-AIRCRAFT  CONFLICT  SCENARIO  EXAMPLE 


ATARS  aust  send  uplink  data  to  the  DABS  processor 
at  least  1/8  scan  before  the  aircraft  is  actually 
interrogated.  These  intervals  are  depicted  in 
Figure  G-2-5,  and  it  is  seen  that  they  subtract  a 
total  of  0.22  scan  (0.88  second  for  a  4-second 
scan  tine)  fron  the  tine  available  for  intersite 
coordination.  In  addition,  sone  nininun  anount  of 
tine  oust  be  set  aside  for  recoaputation  of 
resolution  advisories,  before  delivery  of 
finalized  advisories  to  the  DABS  sensor  for 
uplink.  Advisories  nay  need  to  be  reselected  due 
to  coordination  data  received  fron  other  sites,  as 
explained  belov. 

Since  sector-oriented  ATARS  processing  would 
process  surveillance  reports  a  snail  fraction  of  a 
scan  after  they  are  received,  ATARS  would  detect  a 
conflict  and  choose  advisories  for  uplink  at  sone 
tine  as  shown  in  Figure  G-2-5.  ATARS  would  then 
innediately  transnit  a  nessage  called  a 
"coordination  nessage"  to  all  adjacent  sites. 

This  nessage  consists  of  the  ID  of  the  originating 
site,  the  ID's  and  tracks  (in  own  coordinate 
systen)  of  the  aircraft  in  the  conflict  pair,  and 
provisional  advisories  for  separating  the  pair. 

As  the  other  sites  in  the  network  receive  the 
coordination  nessage,  they  innediately  transnit 
acknowledgnents  addressed  to  the  originating  site, 
(but  also  available  to  all  sites) ,  before 
analyzing  the  data  in  the  coordination  nessage. 
Tines  at  which  own  site  receives  these 
acknowledgnents  are  illustrated  in  Figure  G-2-5. 
Also,  another  site  nay  desire  to  resolve  sone 
other  conflicting  pair  of  aircraft,  and  its 
coordination  nessage  is  received  by  own  site  as 
shown  in  the  figure.  Own  site  replies  with  an 
acknowledgnent  addressed  to  the  originating  site. 
The  data  transnission  speed  of  the  network  nust  be 
sufficiently  high  that  the  entire  round  trip 
coordination  nessage-acknowledgnent  cycle  will  fit 
within  the  interval  bounded  on  the  left  by  "send 
coordination  nessage  to  other  sites"  and  on  the 
right  by  "connence  execution  of  advisory 
reselection  logic". 

Bhen  a  site  receives  a  coordination  nessage  and 
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replies  with  an  acknowledgment  message,  it 
analyzes  the  coordination  message  data,  setting  up 
a  conflict  table  or  pair  record  if  necessary. 

Each  pair  record  at  a  particular  site  will 
indicate  the  ID  of  the  site  managing  that  pair,  be 
it  own  site  or  a  remote  site.  Bhen  own  site 
desires  to  separate  a  pair  of  aircraft  and  one  or 
both  of  the  aircraft  are  already  receiving 
advisories  from  any  site,  those  advisories,  which 
are  recorded  in  the  pair  records,  are  used  as 
constraints  in  selecting  the  new  advisories.  Own 
site  then  transmits  the  provisionally  selected 
advisories  to  the  other  sites  in  a  coordination 
message,  and  nay  change  then  based  on  coordination 
messages  received,  or  acknowledgments  not  received 
(see  below) ,  before  the  advisory  finalization 
time. 

G-2. 4 _ Examples  Illustrating  the  Coordination 

logic 

A  convenient  way  to  present  the  multi-site 
coordination  scheme  is  by  a  series  of  examples. 
Figure  G-2-6  presents  time  lines  (time  proceeds 
from  left  to  right)  for  a  two-site  network,  where 
one  site  desires  to  separate  a  pair  of  aircraft. 

A  vertical  line  drawn  over  this  figure  intersects 
the  two  sites*  time  lines  at  the  same  instant  of 
real  time.  The  first  event  to  occur  is  an 
interrogation  of  the  aircraft  by  site  1,  which 
detects  a  conflicting  pair  for  which  own  site's 
tracks  indicate  site  1  is  responsible.  Site  1 
selects  a  provisional  set  of  advisories  and  sends 
it,  together  with  the  aircraft  ID's,  site  1's  ID, 
and  site  1's  tracks  of  those  aircraft,  to  the 
other  site  in  a  coordination  message,  some 
fraction  of  a  scan  later,  site  2  receives  the 
message,  sends  an  acknowledgment  to  site  1,  and 
records  the  coordination  message  data  in  a 
conflict  table.  Site  1  receives  the 
acknowledgment,  finalizes  the  advisories,  and 
uplinks  them  to  the  aircraft.  In  this  simple 
example,  site  2  did  not  detect  any  conflicting 
pair  for  which  it  was  responsible,  and  so  did  not 
initiate  coordination.  It  only  responded  to 
coordination  initiated  by  site  1.  Coordination 
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FINALIZE  ADVISORIES 


FIGURE  G-2-6 

EVENT  SEQUENCE  FOR  A  SIMPLE  TWO-AIRCRAFT  CONFLICT 


thus  served  no  particular  purpose  in  this  case. 
However,  the  need  for  soae  kind  of  coordination  is 
illustrated  by  the  following  ezanple. 

A  two-site,  three-aircraft  conflict  ezanple  is 
presented  in  Figure  G-2-7.  Site  1  coordinates 
with  site  2  for  resolving  a  conflict  for  which 
site  1  is  responsible,  ezactly  as  in  the  previous 
ezanple.  Several  seconds  later,  site  2 
interrogates  the  aircraft  and  detects  a 
conflicting  pair  it  is  responsible  for  separating. 
Since  this  pair  is  part  of  a  three-aircraft 
conflict,  and  since  site  1  has  coordinated  for 
separating  its  pair,  site  2  finds  a  conflict  table 
already  including  one  of  the  aircraft  fron  the 
pair  currently  in  guestion.  The  advisory  that 
aircraft  is  receiving  fron  site  1  is  used  by  site 
2  as  an  advisory  selection  constraint  when 
choosing  a  provisional  advisory  set.  That  set  is 
sent  to  site  1  in  a  coordination  nessage,  the 
acknowledgment  is  received,  the  advisories  are 
finalized  and  they  are  uplinked  on  the  nezt 
interrogation.  This  ezanple  event  sequence  is  a 
favorable  one  which  could  have  been  handled  by  a 
less  sophisticated  coordination  scheme. 

A  similar  two-site  network,  three-aircraft 
conflict  ezanple  is  presented  in  Figure  G-2-8. 

This  ezanple  is  different  in  that  the  scans  during 
which  the  sites  detect  and  coordinate  for  their 
respective  conflicting  pairs  (the  "critical" 
scans)  overlap  in  real  tine,  rather  than  being 
disjoint  as  in  the  previous  ezanple.  It  is 
apparent  fron  the  figure  that  all  necessary 
infornation  is  available  to  each  site  when  needed. 

In  Figure  G-2-9,  the  critical  scan  of  site  2  is 
wholly  contained  within  that  of  site  1.  Such  a 
random  event  could  occur  since  antenna  rotation 
periods  are  not  likely  to  be  identical,  and 
interrogating  bean  directions  of  adjacent  sites 
are  not  likely  to  be  synchronized.  Site  1 
interrogates  the  aircraft,  selects  provisional 
advisories,  and  transnits  then  to  site  2  in  a 
coordination  nessage.  Before  finalization, 
however,  site  1  receives  a  coordination  nessage 
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FIGURE  G-2-7 

EVENT  SEQUENCE  WHEN  CRITICAL  SCANS  DO  NOT  OVERLAP 


RECEIVE  COORDINATION  MESSAGE 


FIGURE  G-2-9 

MULTI-AIRCRAFT  EVENT  SEQUENCE  IN  WHICH  ONE  SITE’S  SCAN 
IS  WHOLLY  CONTAINED  WITHIN  THE  SCAN  OF  ANOTHER  SITE 


froa  site  2.  This  coordination  message  includes 
an  advisory  for  the  aircraft  coaaon  to  both  pairs, 
which  is  incompatible  with  the  advisory  site  1  had 
provisionally  selected  for  this  aircraft.  Site  1 
detects  this  incompatibility,  and  invokes  the 
priority  order  defined  over  the  set  of  site  ID's 
to  determine  which  site  must  alter  its  provisional 
advisory  set  to  establish  compatibility.  Being 
the  subordinate  site,  site  1  reselects  advisories. 
They  are  then  finalized  and  uplinked.  Mote  that 
the  original  provisional  advisories  were  never 
delivered  to  the  aircraft,  so  no  reversals  of 
existing  advisories  were  involved  in  reselecting 
the  advisories.  Site  2  goes  through  an  identical 
event  history,  except  that  it  finds  itself  to  be 
the  dominant  site,  and  does  not  alter  its 
provisional  advisories  to  establish  compatibility. 
This  example  is  more  difficult  to  coordinate  than 
the  others,  revealing  the  utility  of  the  site  ID 
priority  order. 

Since  coordination  actions  can  occur  at  random 
times,  it  is  possible  for  a  coordination  message 
to  be  received  by  a  site  after  execution  of  its 
own  reselection  logic  has  commenced  but  before 
uplink.  Such  a  situation  is  illustrated  in  Figure 
6-2-10,  where  site  1  would  otherwise  be  reguired 
to  alter  its  set  of  advisories  in  the  face  of 
incompatibility.  Site  1  replies  to  the 
coordination  message  from  site  2  with  a  second 
type  of  reply  called  a  "network  confirmation". 

This  message  informs  site  2  that  the  reason  it  did 
not  receive  an  acknowledgment  froa  site  1  was  not 
that  the  lines  had  failed,  but  that  site  1  could 
no  longer  observe  the  priority  order  because 
execution  of  the  reselection  logic  had  commenced. 
When  confronted  with  this  situation,  site  2  must 
violate  the  priority  order  and  change  its 
provisional  set  of  advisories,  if  necessary  to 
establish  compatibility.  Site  1  will  hold  site 
2's  coordination  message  in  a  buffer  and  analyze 
it  after  uplink.  Hhen  it  does  so,  it  will  find 
that  an  incompatibility  existed,  and  that  site  2 
was  forced  to  alter  its  set  of  advisories.  Since 
site  1  will  have  site  2*s  tracks  of  the  aircraft 
involved  (sent  in  the  coordination  message) ,  and 
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FIGURE  G-2-10 

IULTI-AIRCRAFT  EVENT  SEQUENCE  IN  WHICH  COORDINATE 
IESSAQE  ARRIVES  AFTER  ADVISORIES  HAVE  BEEN  FINALIZEl 


since  all  sites  would  have  identical  aulti- 
aircraft  reselection  logic,  site  1  can  deduce  the 
new  set  of  advisories  chosen  by  site  2.  This  is 
recorded  by  site  1  in  the  appropriate  conflict 
tables  and  used  if  a  new  pair  of  aircraft  should 
shortly  thereafter  require  advisories. 

The  last  exanple  (Figure  G-2-11)  concerns  a  three- 
site  network  coordinating  a  four-aircraft  conflict 
in  which  each  site  has  resonsibility  for  at  least 
one  conflict  pair.  In  this  exasple,  the  critical 
scans  of  all  sites  overlap  in  real  tine.  The 
specific  actions  perforaed  by  site  1  have  been 
oaitted  fron  the  figure  for  the  sake  of  clarity. 
The  provisional  advisories  selected  by  site  2  and 
site  4,  for  the  aircraft  conaon  to  their 
respective  pairs,  are  incoapatible.  Invoking  the 
priority  order,  site  2  alters  its  provisional 
advisories  and  site  4  leaves  its  provisional 
advisories  as  they  are.  Heanwhile,  site  1  needs 
to  know  what  constraints  to  observe  in  selecting 
advisories  for  its  pair.  This  site  has  the 
following  inforaation:  provisional  advisory  sets 
and  tracks  sent  froa  sites  2  and  4  in  their 
coordination  aessages,  the  fact  that  these 
provisional  sets  are  contradictory,  and  the  site 
ID  priority  order.  Site  1  can  therefore  deduce 
that  site  2  will  alter  its  provisional  advisory 
set  since  it  is  subordinate  to  site  4.  Having 
site  2's  tracks  for  the  aircraft  involved,  and 
having  the  saae  nulti-aircraft  advisory 
reselection  logic  as  site  2,  site  1  can  also 
deduce  the  new  set  of  advisories  chosen  by  site  2. 
This  exanple  illustrates  the  considerable 
capability  of  this  approach  to  aulti-site 
coordination. 
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FIGURE  G-2-11 

EVENT  SEQUENCE  FOR  MULTI-AIRCRAFT  CONFLICT  INVOLVING  THREE  SITES 
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The  through-the-transponder  aethod  of  coordination 
has  received  soae  attention  in  the  past,  under  the 
restriction  that  coaaunications  were  liaited  to 
DABS  surveillance  interrogations  and  replies 
(short  aessages  of  56  bits) .  Only  a  fev  spare  bit 
positions  in  these  aessages  were  available  for 
holding  coordination  data,  resulting  in 
perforaance  deficiencies  in  various  aulti- 
aircraft,  aulti-site  situations.  This  restriction 
was  relaxed  in  the  present  study,  allowing  the  use 
of  long  DABS  interrogation  and  reply  aessages  (112 
bits).  The  DABS  foraats  have  unused  capability 
which  can  support  long  aessages  for  this  purpose. 
This  section  presents  the  feasibility  aodel  that 
was  derived  for  through-the-transponder 
coordination. 

Through-the-transponder  coordination  uses  the  saae 
site  ID  set,  priority  order  and  service  zone 
boundary  definition  as  the  ground  lines  aethod. 
Each  site  sets  the  corresponding  site  ID  bit  in 
each  aircraft  currently  receiving  ATARS  service 
froa  it,  and  the  site  ID  field  is  downlinked  in 
the  response  to  any  DABS  interrogation.  ATARS 
stores  the  site  ID  field  in  the  local  track  file 
corresponding  to  the  particular  aircraft. 

Uplinked  advisories  are  accoapanied  by  the 
aircraft  ID's  of  the  threats  stiiulating  thea,  and 
this  data  can  be  stored  in  the  CIR.  Any 
advisories  an  aircraft  is  receiving  are  downlinked 
to  all  sites,  including  the  corresponding  threat 
ID's.  In  response,  each  ATARS  site  sets  up  pair 
records  or  conflict  tables  as  needed.  These  are 
available  iaaediately  if  one  of  the  aircraft 
involved  enters  a  new  conflict  for  which  own  site 
is  responsible.  The  existing  resolution 
advisories  are  used  as  constraints  in  selecting 
advisories  for  the  new  conflict. 

In  the  event  of  site  failure,  neighboring  sites 
reconfigure  their  service  zones  to  extend 
protection  into  the  failed  site's  airspace.  One 
obvious  approach  to  triggering  the  backup  node  for 
these  neighboring  sites  is  by  a  coanand  aanually 


entered  fro*  the  responsible  1TC  facility. 

An  automatic  triggering  of  the  backup  node  night 
be  considered  as  an  alternative.  Daring  site 
conaissioning,  a  region  of  airspace  deep  within  a 
neighboring  site's  service  zone  can  be  sapped  and 
read  into  the  ATAFS  software  as  adaptation  data. 

In  real  tine,  the  site  can  periodically  test  the 
site  ID  fields  of  aircraft  within  that  airspace, 
for  the  presence  of  the  neighboring  site's  ID.  If 
it  is  absent  froa  the  site  ID  fields  of  several 
aircraft,  it  can  be  inferred  that  the  neighboring 
site  has  failed,  and  own  site  can  reconfigure  its 
service  zone  boundaries  (if  own  site  were  the 
doainant  of  the  pair)  to  include  the  failed  site's 
service  region.  If  own  site  was  the  subordinate 
of  the  pair,  reconfiguration  would  occur  naturally 
with  no  specific  actions  reguired.  fhile  in  the 
backup  node,  the  test  airspace  can  still  be 
aonitored  for  the  reappearance  of  the  failed 
site's  ID,  which  would  indicate  that  the  failed 
site  has  becoae  operational  again.  Own  site  would 
then  reconfigure  to  its  noraal  service  zone 
boundaries. 

Froa  this  description,  it  can  be  seen  that  the 
through-the-transponder  coordination  aethod  is 
logically  siailar  to  the  ground  lines  aethod.  The 
difference  is  that  coordination  actions  are 
constrained  to  occur  at  discrete  instants  of  tine 
(the  tiaes  of  interrogation/reply  between  a  site 
and  an  aircraft) ,  rather  than  on  a  tiae  continuua. 
Since  the  sites  cannot  confer  with  each  other 
before  the  actual  uplink  of  advisories,  full 
continuity  of  advisories  is  not  assured  for  all 
possible  event  seguences.  An  exaaple  is  presented 
in  Figure  G-3-1,  which  shows  a  two-site,  three- 
aircraft  conflict.  The  aircraft  pair  whose  site 
ID  fields  both  contain  0011  is  to  be  separated  by 
site  2,  and  the  aircraft  pair  whose  site  ID  fields 
contain  0011  and  0001  is  to  be  separated  by  site 
1.  The  aircraft  in  the  center  of  the  encounter 
will  receive  advisories  froa  both  sites.  As 
explained  in  the  figure,  if  site  2  sends  an 
advisory  to  this  aircraft  iaaediately  before  site 
1  sends  one,  site  1  will  not  have  the  inforaation 
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FIGURE  G-3-1 

VULNERABILITY  OF  THROUGH-THE-TRANSPONDER  COORDINATION 


necessary  for  assuring  coapatibility  before 
uplink.  1  possible  solution  to  this  problen  is  to 
have  logic  in  the  display  which  rejects  advisories 
if  they  are  inconpatible  with  pre-existing 
advisories.  Since  the  CIR  data  would  be 
downlinked,  the  site  could  deduce  that  the 
aircraft  had  rejected  the  connand  it  had  uplinked. 

The  site  could  then  reselect  advisories  for  uplink 
on  the  next  scan.  The  penalty  for  assuring 
coapatibility  in  this  case  is  thus  seen  to  be  a 
one-scan  delay  in  the  aiddle  aircraft  receiving  an 
advisory  for  avoiding  the  threat  to  the  right. 

/ 

It  should  be  noted  that  this  difficulty  indicated 
above  happens  only  with  a  specific  sequence  of 
events  involving  three  aircraft.  The  through-the- 
transponder  logic  would  successfully  coordinate 
aost  three-aircraft  conflicts.  The  conflict  aust 
involve  aircraft  with  different  site  ID  fields, 
and  two  of  the  conflicts  aust  occur  nearly 
siaultaneously. 

Although  this  report  is  devoted  to  coordination 
logic,  a  brief  nention  of  the  aulti-aircraft 
collision  avoidance  logic  should  be  aade.  In  the 
case  when  the  logic  in  the  display  rejects  an 
uplinked  advisory  which  is  inconpatible  with  a 
prior  advisory  (three-aircraft  conflict) ,  the 
incoapatibility  could  have  existed  only  because 
the  two  sites  chose  the  sane  dimension  (horizontal 
or  vertical)  for  resolving  their  respective 
conflict  pairs.  A  likely  candidate  for  a 
reselection  rule  is  for  the  rejected  site  to 
switch  to  the  orthogonal  dinension.  Then  the 
cooperating  aircraft  of  the  second  pair  (the  one 
that  accepted  the  intial  advisory)  would  receive  a 
new  advisory  which  does  not  thwart  the  aaneuver  it 
aight  already  have  begun.  If  the  third  pair  of 
this  three-aircraft  situation  then  cones  into 
conflict,  the  responsible  site  nay  be  forced  to 
reverse  a  prior  advisory. 

The  siailar  but  inferior  perforaance  of  through- 

the-transponder  coordination  suggests  a  role  it  , 

can  play  in  a  nulti-site  network.  Site  pairs 
whose  coverage  overlap  airspaces  contain  sparse 
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traffic  (with  a  very  low  probability  of  aulti- 
aircraft  encounters)  can  coordinate  solely  via 
through-the-transponder.  Those  pairs  sharing 
dense  airspaces  can  coordinate  over  ground  lines. 
Thus,  a  particular  site  way  coordinate  with  one 
neighbor  using  through-the-transponder 
cowaunication,  and  with  another  using  ground 
coaaunication.  The  universal  set  of  site  ID's  and 
priority  order,  and  other  logical  siailarities, 
facilitate  this  scheae. 

As  long  as  all  DABS-eguipped  aircraft  would  have 
the  capability  to  relay  coordination  data  between 
sites,  site  pairs  coordinating  over  ground  lines 
could  siaultaneously  coordinate  through  the 
transponder.  Then,  if  the  ground  coaaunications 
between  the  sites  were  to  fail,  operations  could 
be  continued  and  conflict  resolution  would  be 
continuous  during  the  transition  froa  ground 
coaaunication  to  through-the-transponder 
coaaunication.  Mith  the  capability  of  the 
through-the-transponder  logic  to  provide  backup 
coordination  for  teaporary  periods  of  tiae  when 
the  ground  coaaunications  fail,  it  is  possible  to 
iapleaent  ground  coaaunications  channels  with  less 
redundancy  and  reliability  than  would  otherwise  be 
reguired.  Significant  cost  savings  could  be 
realized  in  following  this  approach. 

The  observation  can  be  Bade  that  there  is  nothing 
inherent  in  through-the-transponder  coordination 
that  reguires  sector  processing  at  the  sites.  If 
it  is  decided  not  to  connect  DABS-ATABS  sites  with 
ground  lines  at  all,  a  level  of  aulti-site 
coordination  could  still  be  accoaplished  through 
the  transponder.  This  could  be  done  using  either 
the  current  epoch  processing  scheae  (without  the 
intersite  aessage  transfer  routines)  or  using  a 
newly  developed  sector  processing  approach.  The 
foraer  aethod  would  reguire  the  least  software 
redesign. 

The  developaent  of  the  design  concept  for  the 
ATABS  aulti-site  logic  described  in  this  appendix 
took  account  of  the  ATABS- BCAS  interface  design 
presented  in  Appendix  C.  The  resulting  design 
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concept  is  compatible  with  the  ATABS- BCAS 
interface  design,  uses  the  sane  CIB  data  in  the 
display,  and  uses  the  saae  air-to-ground  aessage 
foraats.  As  a  result  of  the  deliberate  actiwity 
to  ensure  this  compatibility,  an  approach  was 
developed  which  provides  for  proper  coordination 
between  BCAS  aircraft,  between  BCAS  aircraft  and 
ATARS  sites,  between  ATABS  sites  coaaunicating 
through-the-transponder  and  between  ATABS  sites 
communicating  through  ground  lines. 
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This  final  section  reiterates  the  new  capabilities 
required  to  achieve  the  version  of  multi-site 
coordination  discussed  previously  in  this 
appendix. 

G-4. 1  Development  Tasks 

A  considerable  anount  of  development  of  new  ATARS 
decision  logic  is  necessary.  The  ATARS  task 
sequencing  executive  and  various  routines  need  to 
be  reorganized  fron  epoch  to  sector  processing. 
Shakedown  and  verification  testing  of  the  new 
software  would  follow  development  of  the  new 
logic,  once  this  has  been  accomplished,  the 
actual  time  available  within  the  critical  scan, 
for  site  to  site  communication,  could  be  measured 
under  simulated  full  capacity  conditions.  The 
ground  communications  data  rate  requirements  would 
be  determined  by  this  measure. 

Detailed  logic  design  must  be  undertaken  to  fully 
develop  the  through-the-transponder  design  concept 
presented  here.  The  resulting  logic  should  be 
thoroughly  evaluated  through  simulation  and 
selected  flight  testing.  Study  should  then  be 
conducted  to  verify  the  operation  of  the  ground 
communications  and  through-the-transponder 
communications  methods  when  operating 
simultaneously  with  the  ATARS-BCAS  interface  in 
various  kinds  of  encounters. 

G-4.2  Hew  Requirements 

Within  ATARS,  a  system  for  storing  and  observing 
service  zone  boundaries  is  needed,  together  with  a 
discrete  site  ID  and  priority  order  logic.  Track 
files  would  need  to  include  downlinked  site  ID 
field  contents,  and  conflict  tables  or  pair 
records  would  need  to  be  created  in  response  to 
coordination  message  >  <  -*d  downlinked  CIR  data. 
ATARS  must  be  able  to  create  and  decode 
coordination  messages,  ATARS  acknowledgments  and 
network  confirmation  messages,  and  use  these  to 
deduce  the  actions  of  remote  sites  when 


provisional  advisory  contradictions  are  detected. 
ATARS  nulti-aircra f t  logic  would  need  to  observe 
prior  advisories  originated  by  other  sites  as 
selection  constraints  when  resolving  own’s  pairs. 
Uplinked  advisories  east  be  conpared  with  Clft  data 
downlinked  in  the  corresponding  replies,  to  detect 
instances  of  rejection  by  the  aircraft  of 
inconpatible  advisories  (if  the  subject  pair  of 
sites  is  not  connected  by  a  ground  line) .  I 
service  zone  reconfiguration  logic  to  be  used  in 
the  case  of  failure  of  a  neighboring  site  is 
needed.  An  ATARS  to  DABS  nessage  is  required  for 
connanding  the  set/reset  of  own  site  ID  in 
particular  aircraft. 

After  the  ATARS  sector  processing  logic  has  been 
developed,  the  ground  line  network  architecture 
aust  be  created.  The  nessage  set  used  in  this 
network  would  include  coordination  nessages, 
acknowledgnents,  network  confirnation  nessages, 
and  also  indications  of  site  ID  set/reset  actions 
for  particular  aircraft.  The  required  data 
transnission  rate  for  this  connunications  network 
nust  be  established. 

The  DABS  transponder  and  the  ATARS  display  would 
need  to  be  augnented  to  include  the  CIR  data  and 
the  protocol  for  updating  it.  These  reguirenents 
are  the  sane  as  those  to  support  the  ATARS-BCAS 
interface.  They  are  described  fully  in 
Appendix  C. 
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ABBREVIATIONS  AND  ACRONYMS  PSED  IN  THE  APPENDICES 


AIM 

ARSR 

ARTCC 

ARTS  II 

ARTS  III 

ATARS 

ATC 

ATCRBS 

BOAS 

bps 

CIR 

CPU 

CTS 

DABS 

db 

EPROM 

ER 

FAA 

PPM 

8 

ID 


Airman's  Information  Manual 

Air  Route  Surveillance  Radar 

Air  Route  Traffic  Control  Center 

Automated  Radar  Terminal  System  Model  II 

Automated  Radar  Terminal  System  Model  III 

Automated  Traffic  Advisory  and  Resolution  Service 

Air  Traffic  Control 

Air  Traffic  Control  Radar  Beacon  System 

Beacon  Collision  Avoidance  System 

Bits  per  Second 

Conflict  Indicator  Register 

Central  Processing  Unit 

Central  Track  Store 

Discrete  Address  Beacon  System 

Decibel 

Erasable  Progransable  Read  Only  Memory 
Engineering  Requirement 
Federal  Aviation  Administration 
Feet  per  Minute 
Acceleration  of  Gravity 
Identification 


IFR  Instrument  Flight  Rules 

IPC  Intermittent  Positive  Control 

I PD  Intruder  Position  Data 

LINCON  Linear  Conflict  Predictor  Module  of  Terminal  Conflict 
Alert 

me  Megacycle 

M7MAMS  Module  for  Maneuvering  and  Maneuver  Sensitive 
Aircraft,  A  Module  of  Terminal  Conflict  Alert 

MTBO  Mean  Time  Between  Outage 

NADIN  National  Airspace  Data  Interchange  Network 

NAFEC  National  Aviation  Facilities  Experimental  Center 

NAS  National  Airspace  System 

NASA  National  Aeronautics  and  Space  Administration 

nmi  Nautical  Mile 

PROCON  Proximity  Conflict  Predictor  Module  of  Terminal 
Conflict  Alert 

PROM  Prograanable  Read  Only  Memory 

Ptfl  Proximity  Warning  Indicator 

RAM  Random  Access  Memory 

ROM  Read  Only  Memory 

TCA  Terminal  Control  Area 

VFR  Visual  Flight  Rules 

VSL  Vertical  Speed  Limit 


